Behavioral task
behavioral1
Sample
0x0007000000022df2-49.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
0x0007000000022df2-49.exe
Resource
win10v2004-20231020-en
General
-
Target
0x0007000000022df2-49.dat
-
Size
31KB
-
MD5
382801df443ab3b8661ca58e837a4095
-
SHA1
fc80586c2e28bf8e2360b98ab7298506e32f867d
-
SHA256
190faddb2b7a9e900b52a20fc80514d3418b3fb06dc12a5a19c58a5190962a38
-
SHA512
f58597d965f379d965d9c58564a1c2c99df76fe551cdad09913231c44f8707c075c0d996a32a9223df0452baaf3a5afd06eda4c7f4e2b18c21ee15d4464649a4
-
SSDEEP
384:K9VD6tee+qUOTd2opQTLAdz1SvNmhpdvOjT7PbA6HBiTSnjxZMdP05ldpRMaYIBI:k6Qe+qUv8zcqdvOXA6XkPslJvGaVW
Malware Config
Signatures
-
Smokeloader family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0x0007000000022df2-49.dat
Files
-
0x0007000000022df2-49.dat.exe windows:1 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 29KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE