Behavioral task
behavioral1
Sample
2392-4-0x0000000000400000-0x000000000040B000-memory.exe
Resource
win7-20231201-en
Behavioral task
behavioral2
Sample
2392-4-0x0000000000400000-0x000000000040B000-memory.exe
Resource
win10v2004-20231130-en
General
-
Target
2392-4-0x0000000000400000-0x000000000040B000-memory.dmp
-
Size
44KB
-
MD5
eba8423042ed3346d4edf8ec74dd25e9
-
SHA1
755364fffd225e38e263ecb20a29ed8703b895af
-
SHA256
d2a7d883103fecc04c0183e1ac21bafab2bba41ad01b9745f16a05e67460da0f
-
SHA512
be114f067693440dcd5230666cef065f375eec5cc12b1a5e1732e9c012df0e7bd01c8bb755edf8116543ba7b1e6b5d51acb5a76f8c648f131768b21387fda808
-
SSDEEP
768:d8n3N4JRqvlgxUuB+8zx70f0PSuopLwlFFWO7:dmN4JRylgxbpxSKFFX
Malware Config
Signatures
-
Smokeloader family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2392-4-0x0000000000400000-0x000000000040B000-memory.dmp
Files
-
2392-4-0x0000000000400000-0x000000000040B000-memory.dmp.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE