Behavioral task
behavioral1
Sample
0ac06ee96d1992f569abc14e502d7eab.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0ac06ee96d1992f569abc14e502d7eab.exe
Resource
win10v2004-20231215-en
General
-
Target
0ac06ee96d1992f569abc14e502d7eab.exe
-
Size
37KB
-
MD5
0ac06ee96d1992f569abc14e502d7eab
-
SHA1
2c6f3ef1220f57e4f559bf78d55a997f831a20a7
-
SHA256
4362f475ca31d8385b90921acea5f5c1605111691fd4da9aca8371c6adf6f90e
-
SHA512
4e498c8013ca00e07b7f0666fe4768954235ac53f4cbe8249276d20c2bf9f1e5056e7a1db4038e9a5d27aff3eb0634e296d9f48c61af3f7794aeac80cca55c03
-
SSDEEP
768:3E45SLnQpEhOB/hAGflc5xOXhr7gvexzv36:3E4EqEhOPNfqStgvexzv3
Malware Config
Signatures
-
Smokeloader family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0ac06ee96d1992f569abc14e502d7eab.exe
Files
-
0ac06ee96d1992f569abc14e502d7eab.exe.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 36KB - Virtual size: 35KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE