Behavioral task
behavioral1
Sample
3LI71TR.exe
Resource
win7-20231025-en
Behavioral task
behavioral2
Sample
3LI71TR.exe
Resource
win10-20231023-en
General
-
Target
3LI71TR.exe
-
Size
31KB
-
MD5
4cb96f9c77696dc5df64bf9ebf0935d7
-
SHA1
7e4940a6a917ee6f6c065c87011e26657b6d4219
-
SHA256
8a6a3808a7577e63d7c4513c4d63746c6b5e3d2bbade1ebf63fe247cc08c289e
-
SHA512
104a39a80141934ba71d28fa894ad42cd42289e07e0626d25090c0d914a5e629c1033f4103816ed980c5e284430b1e9844a5034c2600a1f88fb90d7ca7fcb03b
-
SSDEEP
384:K9VD6tee+qUOTd2opQTLAdz1SvNmhpdvOjT7PbA6HBiTSnjxZMdP05ldpRMaYIBI:k6Qe+qUv8zcqdvOXA6XkPslJvGaVW
Malware Config
Signatures
-
Smokeloader family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3LI71TR.exe
Files
-
3LI71TR.exe.exe windows:1 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 29KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE