Behavioral task
behavioral1
Sample
0x000600000001ab8d-53.exe
Resource
win7-20231025-en
Behavioral task
behavioral2
Sample
0x000600000001ab8d-53.exe
Resource
win10v2004-20231127-en
General
-
Target
0x000600000001ab8d-53.dat
-
Size
38KB
-
MD5
0de1c7e6a5ee4c1898c5a8a7f411ee71
-
SHA1
0e9ba521613825b18d307a17f80e80f6c8dbca6c
-
SHA256
a002e5aeea1f935eeda8a50ee6f18a5cef58c0961fe504315a1554d90c64e349
-
SHA512
4a2f2c49967a99a75afe1147cc54879ae9db90f6cc53ffdafb1dcf21a3b19d42baf881834cccd9894aaf66d0a51c0a7a048ec1c37c3602a8541a9e79278a4da7
-
SSDEEP
768:f8FhylJE+hwr5hN7F0I0bQyvUgq65DQVi:f8qlJEQwrDNuIyvD5sV
Malware Config
Signatures
-
Smokeloader family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 0x000600000001ab8d-53.dat
Files
-
0x000600000001ab8d-53.dat.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE