Behavioral task
behavioral1
Sample
b46ca6b63b5c418471e737ff53381b4a58bc2f501f947778fa96a9cbee5ffb8f_payloads.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
b46ca6b63b5c418471e737ff53381b4a58bc2f501f947778fa96a9cbee5ffb8f_payloads.exe
Resource
win10v2004-20231215-en
General
-
Target
b46ca6b63b5c418471e737ff53381b4a58bc2f501f947778fa96a9cbee5ffb8f_payloads.exe
-
Size
40KB
-
MD5
35840386396e44516a791c55a0d007ef
-
SHA1
bc8b0b7bad39e8af351994b405662271679a6a0f
-
SHA256
d6e58255fab8064f94b2ab44eebb1f1dcebae14efdb0fb28b6944e6f56e65571
-
SHA512
a8cd301f257ac631a6c77cf89c55eaa9b89f083e50a5ecc02cc76dcad1024fa8bf4212afc96a6a700ab76cfc2f35663e5a429fc9712074ae98b0893c6d96b40b
-
SSDEEP
768:4raag0YrBHXZUrRhSZOh/q+wjDp8v3uWqeqLhy5:4raDD1HJ+94jDS/XqeqVy5
Malware Config
Signatures
-
Smokeloader family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b46ca6b63b5c418471e737ff53381b4a58bc2f501f947778fa96a9cbee5ffb8f_payloads.exe
Files
-
b46ca6b63b5c418471e737ff53381b4a58bc2f501f947778fa96a9cbee5ffb8f_payloads.exe.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 37KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE