Behavioral task
behavioral1
Sample
11ffcd7ea72e8180d03740511a8e7810.exe
Resource
win7-20231025-en
Behavioral task
behavioral2
Sample
11ffcd7ea72e8180d03740511a8e7810.exe
Resource
win10v2004-20231020-en
General
-
Target
11ffcd7ea72e8180d03740511a8e7810.bin
-
Size
36KB
-
MD5
11ffcd7ea72e8180d03740511a8e7810
-
SHA1
9232a298d3c17cb5153a04fc33164bc6187f047d
-
SHA256
527baba3391e0d6ecc30e1455b07b39a5ac5f23466f4c2774055c1d18b5db1e0
-
SHA512
3c7b5408d007e67c8651892fd4986500e16224f9d6ff8006da869d93671aa8453257a008e2f787ecf847a0b00386c6711c30942ee3fa66c2901fadca2f8b5f31
-
SSDEEP
768:OkUqYDN9IoKpDd1KM02kQhx4hOtFceWzYqvz:zLirLKtd1PBkQD4UtFceWnz
Malware Config
Signatures
-
Smokeloader family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 11ffcd7ea72e8180d03740511a8e7810.bin
Files
-
11ffcd7ea72e8180d03740511a8e7810.bin.exe windows:1 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE