Behavioral task
behavioral1
Sample
0x0006000000022e00-52.exe
Resource
win7-20231025-en
Behavioral task
behavioral2
Sample
0x0006000000022e00-52.exe
Resource
win10v2004-20231025-en
General
-
Target
0x0006000000022e00-52.dat
-
Size
31KB
-
MD5
50120e5ecd16b357ee3f62985f1f08ef
-
SHA1
80ecc7c9c88e92424231499d1de79fc8ff368816
-
SHA256
3ee5ad080bb87d06b1a10df6b82ac3467033041f8df6a0eae3738a00a25760bd
-
SHA512
5c78fc2ab0efa257d66dd90281e4c97156ae9addae176612c8cb546282847c4d2c41ebdbd3a779ffbe4b988cab5ab2bb0f470eabd08a68d143cc5b2732149daf
-
SSDEEP
384:K9VD6tee+qUOTd2opQTLAdz1SvNmhpdvOjT7PbA6HBiTSnjxZMdP05ldpRMaYIBI:k6Qe+qUv8zcqdvOXA6XkPslJvGaVW
Malware Config
Signatures
-
Smokeloader family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0x0006000000022e00-52.dat
Files
-
0x0006000000022e00-52.dat.exe windows:1 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 29KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE