Behavioral task
behavioral1
Sample
2136-0-0x0000000000400000-0x0000000000409000-memory.exe
Resource
win7-20231025-en
Behavioral task
behavioral2
Sample
2136-0-0x0000000000400000-0x0000000000409000-memory.exe
Resource
win10v2004-20231020-en
General
-
Target
2136-0-0x0000000000400000-0x0000000000409000-memory.dmp
-
Size
36KB
-
MD5
29afe037be595020e28ff662561aa6e8
-
SHA1
f9507ce8291342c05b90d9eaa10171d72aa8bda9
-
SHA256
de423e4ca7a40cb31c612c876bb3cbb494d63a671a5dbff5756b75a36272e9d6
-
SHA512
f0621754caa02f31c59dc37fffa5d78b3c666a2682852caf117625a1668676581020f816fd7b92261fd277ea7687bdca926fae1afc62468ad6306d71bdb94830
-
SSDEEP
768:OAUoYtNrIoKpDd1KM02kQhx4hOtFceWzYqvz:H5EZLKtd1PBkQD4UtFceWnz
Malware Config
Signatures
-
Smokeloader family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2136-0-0x0000000000400000-0x0000000000409000-memory.dmp
Files
-
2136-0-0x0000000000400000-0x0000000000409000-memory.dmp.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE