Behavioral task
behavioral1
Sample
bdf0d0149ee88a4b66f6535e6049fa2faf1351a69c7df0146b1fe6964e9c4ad6.exe
Resource
win7-20231215-en
General
-
Target
c8159fa89113ec6fc180ccb76ff3bdc6.bin
-
Size
27KB
-
MD5
10816cef5074a409b083fb18477e6e81
-
SHA1
341e1f8d370a1778b0f7cf1da5e21fc378b0e41c
-
SHA256
7c360e39848a4045c9ad6d36ce58501ca4e5fc58aa2aa9edc39b195d5e4d7dfd
-
SHA512
73cbe0df1177f28f7e70da0d3eda6b9c7ce1614b18b77c051efe36386d912f583cb996ccbd0a94dfdafd19b8f8e4b379d190b2fdc394893333922fe8df5a3a40
-
SSDEEP
768:Ct9M9buEQusU3GjeLSa+zW/LGvXgzD0Il:CtBEQ7UEemvrYzN
Malware Config
Signatures
-
Smokeloader family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/bdf0d0149ee88a4b66f6535e6049fa2faf1351a69c7df0146b1fe6964e9c4ad6.exe
Files
-
c8159fa89113ec6fc180ccb76ff3bdc6.bin.zip
Password: infected
-
bdf0d0149ee88a4b66f6535e6049fa2faf1351a69c7df0146b1fe6964e9c4ad6.exe.exe windows:1 windows x86 arch:x86
Password: infected
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 36KB - Virtual size: 35KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE