Behavioral task
behavioral1
Sample
0x0006000000022e06-50.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
0x0006000000022e06-50.exe
Resource
win10v2004-20231023-en
General
-
Target
0x0006000000022e06-50.dat
-
Size
31KB
-
MD5
304540fc7e2a119c2afa14406b7a2868
-
SHA1
f621a995e534cfb37da63ade9b0f330da2da066d
-
SHA256
840c9ec18affe5b5bc404e0093066f084fbff11ea054e68c4d2807817e13781a
-
SHA512
e73624c589acb009a7f89beed1a7cc84f84ad089227584ac0960a03327f316d4b7a6a96ba7de75d257b78a76055147d3f9e9ef01e4b88b9956802e937177ff50
-
SSDEEP
384:K9VD6tee+qUOTd2opQTLAdz1SvNmhpdvOjT7PbA6HBiTSnjxZMdP05ldpRMaYIBI:k6Qe+qUv8zcqdvOXA6XkPslJvGaVW
Malware Config
Signatures
-
Smokeloader family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0x0006000000022e06-50.dat
Files
-
0x0006000000022e06-50.dat.exe windows:1 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 29KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE