Behavioral task
behavioral1
Sample
2216-0-0x0000000000400000-0x0000000000409000-memory.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
2216-0-0x0000000000400000-0x0000000000409000-memory.exe
Resource
win10v2004-20231023-en
General
-
Target
2216-0-0x0000000000400000-0x0000000000409000-memory.dmp
-
Size
36KB
-
MD5
77e463f0ef7e7193c68e59451d24ccbc
-
SHA1
411d98513e5966885c1f99672ff348b317f3a854
-
SHA256
faea51ce3c99975791461d5324210defd5207e359c5ce65784204e39e0a2e3f1
-
SHA512
5f0383f75d194755a4bf0285ca8c14401d12645f4416ed8d498b1024076d0c263633c7de93c6663e0e08c701d41c13657d746c36a0351c282f901703c9097ca6
-
SSDEEP
768:OkUqYDNQIoKpDd1KM02kQhx4hOtFceWzYqvz:zLiSLKtd1PBkQD4UtFceWnz
Malware Config
Signatures
-
Smokeloader family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2216-0-0x0000000000400000-0x0000000000409000-memory.dmp
Files
-
2216-0-0x0000000000400000-0x0000000000409000-memory.dmp.exe windows:1 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE