General
-
Target
0x0007000000016cba-119.dat
-
Size
37KB
-
MD5
226a9756a13db11e9b7a0bf564998191
-
SHA1
cd56ed73215be2917cc5718f8793e91349335781
-
SHA256
59101b7b237d9e3247b87892de8d7204b178ddf2fcef9930990d51b66ec0bdfb
-
SHA512
ec4c0e91a454c66c2544e2e073a92b656010dd1a0d579af5cf0d17adac646a8a7e6bdc73e38724a8171a655dbfde0c36d6a9544d2618dd92c7b82390b3fe0d18
-
SSDEEP
768:d8n3N4JRqwg8UTB+8zx70f0PSuopLwlFFWO7:dmN4JRrg8ypxSKFFX
Score
10/10
Malware Config
Signatures
-
Smokeloader family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0x0007000000016cba-119.dat
Files
-
0x0007000000016cba-119.dat.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE