SmooqyKnockBack[.]exe | Triage

Resubmissions

05/03/2024, 15:23

240305-ssyppsah69 7

05/03/2024, 15:21

240305-srb5baah39 7

05/03/2024, 15:19

240305-sqkp3aag98 7

Sharing

Copy URL Twitter E-mail

General

Target

SmooqyKnockBack.exe
Size

531KB
MD5

7d681ded05186aeb602a326dece5300f
SHA1

97832d0f1af7a2d8d4af2140972c0946007002c4
SHA256

b97999cbfc01228499ee942af8291192cf6c1d2cfeff918cc3ad7b1d06ca32e4
SHA512

9e3a075d2c870e6b51f281455d1cfe3f95bf28b92c6c249f2cb980a65181764c6b9b50a2a380706178ad45dd9eeee56424793e4aa10cea0896bd768af5576bda
SSDEEP

12288:ahI078V4dP9C98Z2mNdEXhjFwXFcTpfXbGeBzHjS3rI:2I88OdPXZ2IdEX9iXFwpD/H

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SmooqyKnockBack.exe

Files

SmooqyKnockBack.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

DQBBX
Size: 440KB - Virtual size: 439KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 64KB - Virtual size: 63KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Size: 512B - Virtual size: 16B

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ