Behavioral task
behavioral1
Sample
tmp.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
tmp.exe
Resource
win10v2004-20231023-en
General
-
Target
tmp
-
Size
37KB
-
MD5
556f5fbb62a70a06c52525540857f958
-
SHA1
224f8cf4e08a8bb8bb099d2de7a4ee575d0b02d7
-
SHA256
d68d7b4ac8ef18dae227e79175d1236bf11ca83a570986bc187c391999fab8c0
-
SHA512
0ec18093c06fea0328af1299abf09c869313cf4f076a0ae0f56c0645f71802ebfa1ad03d3ba63c9d0b36364ddb751fb9b7b94e6a9b8dfcea9b405a8fec8e409a
-
SSDEEP
768:98b2ukdzw6DzTvmrPfC48Ap7eFtBiYKeRodq2p3T3+lr04rBjeK:Kb2bdzw6DzTvm8A9QtBDKeRp2pDaljD
Malware Config
Signatures
-
Smokeloader family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource tmp
Files
-
tmp.exe windows:1 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE