Behavioral task
behavioral1
Sample
b846f0bb8a677991d85807fded1e9007.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
b846f0bb8a677991d85807fded1e9007.exe
Resource
win10v2004-20231201-en
General
-
Target
b846f0bb8a677991d85807fded1e9007.bin
-
Size
37KB
-
MD5
b846f0bb8a677991d85807fded1e9007
-
SHA1
38e24fe6301cf2426bb90ea635676c87a860c21f
-
SHA256
62f28fb67834679ed133e70158c6b89327de331af2e89ee895da8f43d2bb13a2
-
SHA512
890b9b0f691064c81e53fcff4235ac382c06713d4065d0e68bc7ea18867a5b883a8f09a8c3e54be9b8f6ed82cd997fc7b3154d9305751f5983cdfd6fedd3a96c
-
SSDEEP
768:d8n3N4JRqwg8UTB+8zx70f0PSuopLwlFFWO7:dmN4JRrg8ypxSKFFX
Malware Config
Signatures
-
Smokeloader family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b846f0bb8a677991d85807fded1e9007.bin
Files
-
b846f0bb8a677991d85807fded1e9007.bin.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE