Behavioral task
behavioral1
Sample
dd02b4f83462302b06278dea2591a9d32ab4534743f96b44b24d642e55b721fb_dump.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
dd02b4f83462302b06278dea2591a9d32ab4534743f96b44b24d642e55b721fb_dump.exe
Resource
win10v2004-20231222-en
General
-
Target
dd02b4f83462302b06278dea2591a9d32ab4534743f96b44b24d642e55b721fb_dump.exe
-
Size
32KB
-
MD5
abc9982b12769a29178b120ed8d79d7c
-
SHA1
f8360d1f967b2310e02a81cfbb1206bb3632ee71
-
SHA256
f58e57d1015834305e61c7f021794c682ee9174bb3ad6eb189620811fea975a8
-
SHA512
bd8db2c3d2cfc90c04f72ce83476095abb49e5e7c9ec1366dd3653fbca95a8d063b4980977ce8687626bfe75f4d62bda408d2b5713dd25e04ecbe270973ce037
-
SSDEEP
768:OAUqYpNSIoKpDd1KM02kQhx4hOtFceWzYqvz0bOS:HLo8LKtd1PBkQD4UtFceWnz
Malware Config
Signatures
-
Smokeloader family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dd02b4f83462302b06278dea2591a9d32ab4534743f96b44b24d642e55b721fb_dump.exe
Files
-
dd02b4f83462302b06278dea2591a9d32ab4534743f96b44b24d642e55b721fb_dump.exe.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE