Behavioral task
behavioral1
Sample
154d828adfe51317a04c2ff1608d1a1e.exe
Resource
win7-20231130-en
Behavioral task
behavioral2
Sample
154d828adfe51317a04c2ff1608d1a1e.exe
Resource
win10v2004-20231130-en
General
-
Target
154d828adfe51317a04c2ff1608d1a1e.bin
-
Size
36KB
-
MD5
154d828adfe51317a04c2ff1608d1a1e
-
SHA1
3851b713f076188fad2c038508a5cb597cc1ab0b
-
SHA256
c455ad7e4f8442102a800300aa67120f06c7559081df7e0301c47b078b77b5ef
-
SHA512
8a628482d84a80428429336ec57491b97a7639999ef0870fe9039382514e7fe3e3b51a9c4524e7763bb770b924640ee2ee2abc06077f84d809b66e9fc7b2341a
-
SSDEEP
768:OAUoYtNnIoKpDd1KM02kQhx4hOtFceWzYqvz:H5E1LKtd1PBkQD4UtFceWnz
Malware Config
Signatures
-
Smokeloader family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 154d828adfe51317a04c2ff1608d1a1e.bin
Files
-
154d828adfe51317a04c2ff1608d1a1e.bin.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE