Behavioral task
behavioral1
Sample
50a9d90029791a1d8c9691bfd147d33e.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
50a9d90029791a1d8c9691bfd147d33e.exe
Resource
win10v2004-20231215-en
General
-
Target
50a9d90029791a1d8c9691bfd147d33e
-
Size
28KB
-
MD5
50a9d90029791a1d8c9691bfd147d33e
-
SHA1
16e22fabc635fb1ec0df64a2347729970a253ffc
-
SHA256
6956ad4808e8a3757c04f98cdce46d59de3fe4a1b7eaa4cc179023fad25f8ee2
-
SHA512
1bd279d65f2181841d3278600914261468b6d19e7bc9a29425e9dcd71a8fa4cb0634a2c1d59defc4d3c1857cf12c24fc3c57fbbed2792ee62724c35ba6887bd4
-
SSDEEP
768:xQ9eXGZ9rvy8PLh0TO1Xvf26+fIXD8RX90:fXMs8PegXH2YDQN
Malware Config
Signatures
-
Smokeloader family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 50a9d90029791a1d8c9691bfd147d33e
Files
-
50a9d90029791a1d8c9691bfd147d33e.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE