Behavioral task
behavioral1
Sample
0x0006000000015c69-1466.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
0x0006000000015c69-1466.exe
Resource
win10v2004-20231201-en
General
-
Target
0x0006000000015c69-1466.dat
-
Size
37KB
-
MD5
70fe458368724ec513a918b628dc80a9
-
SHA1
ddb1cb2f62175134a941c9e80da4a883ba7e0bf2
-
SHA256
edbb77cc353bf39c1f0658e2711be30347245ab286e067d62578afa8135f9d2c
-
SHA512
b7c4522902d6aa6f5ee2740905ddfba5ed7842ad00a407d16a0936fbc3992029f7f7e0ab2d18fbe6c63f06bdd6f3a847a3b4ca058f1039c3c86d4744db28fcab
-
SSDEEP
768:d8n3N4JRqwg8UTB+8zx70f0PSuopLwlFFWO7:dmN4JRrg8ypxSKFFX
Malware Config
Signatures
-
Smokeloader family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0x0006000000015c69-1466.dat
Files
-
0x0006000000015c69-1466.dat.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE