Behavioral task
behavioral1
Sample
f58e57d1015834305e61c7f021794c682ee9174bb3ad6eb189620811fea975a8exe.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
f58e57d1015834305e61c7f021794c682ee9174bb3ad6eb189620811fea975a8exe.exe
Resource
win10v2004-20231215-en
General
-
Target
f58e57d1015834305e61c7f021794c682ee9174bb3ad6eb189620811fea975a8exe.exe
-
Size
32KB
-
MD5
abc9982b12769a29178b120ed8d79d7c
-
SHA1
f8360d1f967b2310e02a81cfbb1206bb3632ee71
-
SHA256
f58e57d1015834305e61c7f021794c682ee9174bb3ad6eb189620811fea975a8
-
SHA512
bd8db2c3d2cfc90c04f72ce83476095abb49e5e7c9ec1366dd3653fbca95a8d063b4980977ce8687626bfe75f4d62bda408d2b5713dd25e04ecbe270973ce037
-
SSDEEP
768:OAUqYpNSIoKpDd1KM02kQhx4hOtFceWzYqvz0bOS:HLo8LKtd1PBkQD4UtFceWnz
Malware Config
Signatures
-
Smokeloader family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f58e57d1015834305e61c7f021794c682ee9174bb3ad6eb189620811fea975a8exe.exe
Files
-
f58e57d1015834305e61c7f021794c682ee9174bb3ad6eb189620811fea975a8exe.exe.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE