Behavioral task
behavioral1
Sample
dd7f5bd431c5ef84cc58b490eed097e76b800d6c822de3de6d68d88881626a3b.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
dd7f5bd431c5ef84cc58b490eed097e76b800d6c822de3de6d68d88881626a3b.exe
Resource
win10v2004-20231222-en
General
-
Target
c997f2f7258e41b614a73c6ad961f7fc.bin
-
Size
28KB
-
MD5
2a1270d17ba09c6ed500b214e389fd7b
-
SHA1
d15074e3bdaa9256e6b6798fffc4f183b7662179
-
SHA256
63cb65d4a8ae71d9a96356c26c2bc4898b10af032fe7a066094edc6d2bb7543f
-
SHA512
4510ba193a9a436f661f94f640e764da4cae3d6d194c043dead96ecaedffa8f62b021f9d590a8c4553881ba53a1461a0432b8c97d367fbbcb608ad45a5ef6690
-
SSDEEP
768:Q6YSew4CWq/xXDE9UzLTkOuj6o1n2xHY/N2A1H:HWq/xXDvLTk9nwolh
Malware Config
Signatures
-
Smokeloader family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/dd7f5bd431c5ef84cc58b490eed097e76b800d6c822de3de6d68d88881626a3b.exe
Files
-
c997f2f7258e41b614a73c6ad961f7fc.bin.zip
Password: infected
-
dd7f5bd431c5ef84cc58b490eed097e76b800d6c822de3de6d68d88881626a3b.exe.exe windows:1 windows x86 arch:x86
Password: infected
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE