Behavioral task
behavioral1
Sample
1eeeb5aa7dcd72a9912e8f54c60b07915d4c7fb4180c2e497483357ab9ac8640_dump.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1eeeb5aa7dcd72a9912e8f54c60b07915d4c7fb4180c2e497483357ab9ac8640_dump.exe
Resource
win10v2004-20231215-en
General
-
Target
1eeeb5aa7dcd72a9912e8f54c60b07915d4c7fb4180c2e497483357ab9ac8640_dump.exe
-
Size
40KB
-
MD5
46404801da9e3f92ceafdde930ca25ff
-
SHA1
59bfa3a3fa6f1bf68096fc6fd48ae97d901e47d2
-
SHA256
bfb1a7e883dcc4aa32c40f51d5d32926adaa83673cc9413509922c61d9f22523
-
SHA512
f4774a0c88f169e62d392262bcd6f38ffd687ca212e7e6834460c9f8fb43e0752109fa2c4a5dc9e4d05a22c49ce3a9b868b1440e818bbe5ecacc7678c980a0f2
-
SSDEEP
768:o1rG+Sx0ruYuNyscK+2Ohm7rDtHqnZzl1xP5SusjSLun9hQ++Kd:o5G+Sx0Bz4vxkzHxP5Nsj8khQ+v
Malware Config
Signatures
-
Smokeloader family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1eeeb5aa7dcd72a9912e8f54c60b07915d4c7fb4180c2e497483357ab9ac8640_dump.exe
Files
-
1eeeb5aa7dcd72a9912e8f54c60b07915d4c7fb4180c2e497483357ab9ac8640_dump.exe.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE