Behavioral task
behavioral1
Sample
0f2ec50da0186e99fb0bf47053b56921.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0f2ec50da0186e99fb0bf47053b56921.exe
Resource
win10v2004-20231215-en
General
-
Target
0f2ec50da0186e99fb0bf47053b56921.exe
-
Size
37KB
-
MD5
0f2ec50da0186e99fb0bf47053b56921
-
SHA1
765f74d96599e8970078d307808e49e8d694a98e
-
SHA256
121b10b4f31da4ecba0a8745a31cb57300982e45310454e8232912ed2afc4248
-
SHA512
ee80fe5bc05c811c9cd1e7af8c13bf3e8c93c322e6eade57e068ea3ee5d69e13d620a43380e60753823167ddf2a01a9019b2a7a324de93aec7f17abe097f3b1c
-
SSDEEP
768:3E45SLnQpEhOB/hAGflc5xOXhr7gvexzv36:3E4EqEhOPNfqStgvexzv3
Malware Config
Signatures
-
Smokeloader family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0f2ec50da0186e99fb0bf47053b56921.exe
Files
-
0f2ec50da0186e99fb0bf47053b56921.exe.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 36KB - Virtual size: 35KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE