Behavioral task
behavioral1
Sample
86c01a451f671312f8448f5ad9f72f2d55f810e6e996bca7f9bce57d4b35d219_dump.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
86c01a451f671312f8448f5ad9f72f2d55f810e6e996bca7f9bce57d4b35d219_dump.exe
Resource
win10v2004-20240508-en
General
-
Target
86c01a451f671312f8448f5ad9f72f2d55f810e6e996bca7f9bce57d4b35d219_dump.exe
-
Size
40KB
-
MD5
928633fba2388fc690f4b61bcded9273
-
SHA1
6ac556b4e91c7bce1f20874026df37c69b7de35d
-
SHA256
5b8e18d982c1c1501a38913731cf546b6f214c66ef9a99a25ae1fd5b1dee78e4
-
SHA512
8732fdc266df2e3ade2812eb365dcad5f8876e7519bbbdf7b0c87be34b82b7024f5fa51f7c76a5fcc4986175e5858c0f649e0a27fe5a9caa6cde875d114a78cb
-
SSDEEP
768:xIOvQlJqaTf6/WlaZFfhXtx4EpDtzpqBPHRvgkz:JvQXgxT5Xtx48tQZxvgkz
Malware Config
Signatures
-
Smokeloader family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 86c01a451f671312f8448f5ad9f72f2d55f810e6e996bca7f9bce57d4b35d219_dump.exe
Files
-
86c01a451f671312f8448f5ad9f72f2d55f810e6e996bca7f9bce57d4b35d219_dump.exe.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 37KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE