Behavioral task
behavioral1
Sample
8c914553c6183ea70ba24e83a66da5eaa9badc0a1ffc56b27418f071825f4d8e.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
8c914553c6183ea70ba24e83a66da5eaa9badc0a1ffc56b27418f071825f4d8e.exe
Resource
win10v2004-20240426-en
General
-
Target
8c914553c6183ea70ba24e83a66da5eaa9badc0a1ffc56b27418f071825f4d8e
-
Size
44KB
-
MD5
987f19f451eb39a354fa57addad2f01e
-
SHA1
8a94a0b6b5cd3efd2313c92fac2964a8b79b3583
-
SHA256
8c914553c6183ea70ba24e83a66da5eaa9badc0a1ffc56b27418f071825f4d8e
-
SHA512
087d47d53e5f07fc4ffd319091b3efb7b56a63d6e11bacd990a3019059e0954f1364b9f40cc9eaf80c3707bf86f4df1d2ca3eb6947bceede07e083578a14d9cc
-
SSDEEP
768:dA7kbPCKW0V+ayregqjEsDT9UCbaEAviIaBhrhROW962OIv:d1lQayrzqjN9UspAK5hrh8W9ew
Malware Config
Signatures
-
Smokeloader family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8c914553c6183ea70ba24e83a66da5eaa9badc0a1ffc56b27418f071825f4d8e
Files
-
8c914553c6183ea70ba24e83a66da5eaa9badc0a1ffc56b27418f071825f4d8e.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE