Behavioral task
behavioral1
Sample
1705065785d5a65a86155b3f63cc8cdc5ba849785e8a8184ac2c9e7d08a771f09a39631ea2998.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
1705065785d5a65a86155b3f63cc8cdc5ba849785e8a8184ac2c9e7d08a771f09a39631ea2998.exe
Resource
win10v2004-20231215-en
General
-
Target
1705065785d5a65a86155b3f63cc8cdc5ba849785e8a8184ac2c9e7d08a771f09a39631ea2998.dat-decoded
-
Size
37KB
-
MD5
c997f2f7258e41b614a73c6ad961f7fc
-
SHA1
35bae15932993a27788979302bd8b328c31eac6a
-
SHA256
dd7f5bd431c5ef84cc58b490eed097e76b800d6c822de3de6d68d88881626a3b
-
SHA512
4129a91981155dc8c680aea7f00a3cd63d02e4f806c49039a763c67943dddc99d5a38dfb8de78d2020db39fdb11d2363b3d20cf4c35cce1210264811ae4e5c76
-
SSDEEP
768:hNZLNmqIfxMHORROsfru8UDBm5VMdH2DFhF8dM3uiLddSW:hkq0xM1sfBUNm8dAPUa5C
Malware Config
Signatures
-
Smokeloader family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1705065785d5a65a86155b3f63cc8cdc5ba849785e8a8184ac2c9e7d08a771f09a39631ea2998.dat-decoded
Files
-
1705065785d5a65a86155b3f63cc8cdc5ba849785e8a8184ac2c9e7d08a771f09a39631ea2998.dat-decoded.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE