Behavioral task
behavioral1
Sample
NEAS.f344c1b4123d7107145951b5a3184210.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.f344c1b4123d7107145951b5a3184210.exe
Resource
win10v2004-20231023-en
General
-
Target
NEAS.f344c1b4123d7107145951b5a3184210.exe
-
Size
30KB
-
MD5
f344c1b4123d7107145951b5a3184210
-
SHA1
3832a7714adfee5a737d63f40d29daec77737910
-
SHA256
d5a0dfb9d4d5c980ea1c1c0c72277ae80a0db5dfae2aa09c92e9eca7b77adb72
-
SHA512
2b0bd3d9278a88529b3e65a88555d48eeb9e6de46a3741fc77959fc719a028a6217cca3fb09c40f4a001b5a130a7bc8f1ac68da6a8f26908b534f41cea69cb3d
-
SSDEEP
384:K9VD6tee+qUOTd2opQTLAdz1SvNmhpdvOjT7PbA6HBiTSnjxZMdP05ldpRMaYIBI:k6Qe+qUv8zcqdvOXA6XkPslJvGaVW
Malware Config
Signatures
-
Smokeloader family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.f344c1b4123d7107145951b5a3184210.exe
Files
-
NEAS.f344c1b4123d7107145951b5a3184210.exe.exe windows:1 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 29KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE