Behavioral task
behavioral1
Sample
3oz68Vq.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
3oz68Vq.exe
Resource
win10-20231025-en
General
-
Target
3oz68Vq.exe
-
Size
31KB
-
MD5
3bd2e45664a57ee7addde97984d2ee77
-
SHA1
17dc9ad6b57e2b7c072b21c0f4c227cad4147a1b
-
SHA256
a6a6f7caa7261fe824c8ffb3c4949f42b53e21c268c52c212407b1920435f8f7
-
SHA512
4ee98bab037304e75c3d56bce64cc3a97039e0e45b033a9e91e0e674460424f64dcb13827ddfa1eb7cc1314ea7b09c866b5e073f999ec43737cfd2fc1a51c590
-
SSDEEP
384:K9VD6tee+qUOTd2opQTLAdz1SvNmhpdvOjT7PbA6HBiTSnjxZMdP05ldpRMaYIBI:k6Qe+qUv8zcqdvOXA6XkPslJvGaVW
Malware Config
Signatures
-
Smokeloader family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3oz68Vq.exe
Files
-
3oz68Vq.exe.exe windows:1 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 29KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE