Behavioral task
behavioral1
Sample
5a934ec4287976477c116b02c2110c0c564aaf38314cb555831277331efa09ec.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
5a934ec4287976477c116b02c2110c0c564aaf38314cb555831277331efa09ec.exe
Resource
win10v2004-20231222-en
General
-
Target
af3a5be194aee0d4a874338723495444.bin
-
Size
27KB
-
MD5
ca603269f9ebd33398d539cf08b3f89c
-
SHA1
5b4c0f2600e8ebe66e8f95fcd70dee5adae673c1
-
SHA256
2db158f25e776075b5a50380b9e6c67d9f6861b4a2240026df8fecddb1d66369
-
SHA512
2af10a8e10d892200292730fa3a9ce8fa610ea5efa25c8379fc94c58cb08f7f3580576084dd42f466e44ab49b21c15a1faed67945881969e930e016d3b8ec998
-
SSDEEP
768:Hsib48md2u+T6QDiIjS+24VK74DKgjkQYYew4SZmjav:Hsc4n7QDf2z72br4Ci8
Malware Config
Signatures
-
Smokeloader family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/5a934ec4287976477c116b02c2110c0c564aaf38314cb555831277331efa09ec.exe
Files
-
af3a5be194aee0d4a874338723495444.bin.zip
Password: infected
-
5a934ec4287976477c116b02c2110c0c564aaf38314cb555831277331efa09ec.exe.exe windows:1 windows x86 arch:x86
Password: infected
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 36KB - Virtual size: 35KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE