Behavioral task
behavioral1
Sample
66a8d9c761f8495097cc4a1ed001812c.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
66a8d9c761f8495097cc4a1ed001812c.exe
Resource
win10v2004-20231127-en
General
-
Target
66a8d9c761f8495097cc4a1ed001812c.bin
-
Size
44KB
-
MD5
66a8d9c761f8495097cc4a1ed001812c
-
SHA1
3ff0ab2520a74c1da48557e353252b1cfc4c8382
-
SHA256
c2c3ccca9560349349ef1ee524fc8bf17656d79b9d53786e71f90d96ce50df4f
-
SHA512
1d370893aa85ade773bbd0b3083d6e341209779a14a34484a646af6244e8149613e4d3f2d2148d7a18501213f1aac1888785952a7de08601467aff97cc21763a
-
SSDEEP
768:d8n3zJRqwgxUBB+8zx70f0PSuopLwlFFWO7:dmzJRrgxEpxSKFFX
Malware Config
Signatures
-
Smokeloader family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 66a8d9c761f8495097cc4a1ed001812c.bin
Files
-
66a8d9c761f8495097cc4a1ed001812c.bin.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE