Behavioral task
behavioral1
Sample
febb01c58274dc2b7127823be1da06a8f9715bcef8c20ef480696d96e0ed7d7b.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
febb01c58274dc2b7127823be1da06a8f9715bcef8c20ef480696d96e0ed7d7b.exe
Resource
win10v2004-20240508-en
General
-
Target
febb01c58274dc2b7127823be1da06a8f9715bcef8c20ef480696d96e0ed7d7b.exe
-
Size
40KB
-
MD5
a1dec75a2b2f3c5abdf498a6c7c512c8
-
SHA1
fdb3b8eca89fc351bc9eee84b4489fc9a89452ef
-
SHA256
febb01c58274dc2b7127823be1da06a8f9715bcef8c20ef480696d96e0ed7d7b
-
SHA512
0c9c060083e3064124e49b3c13bcc39a44dac3939e7a4d33525f097c787938dd88aa8b179e8a90ea6fbebe5e243ac9c5412a6c6b9e379ba5ae20306be21afa2e
-
SSDEEP
768:yBQB1CTmqUQHXQkkU3NIZjKQu/MGQ2lsDBw7en:yBc0+yQmNIZreMp28O7Y
Malware Config
Signatures
-
Smokeloader family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource febb01c58274dc2b7127823be1da06a8f9715bcef8c20ef480696d96e0ed7d7b.exe
Files
-
febb01c58274dc2b7127823be1da06a8f9715bcef8c20ef480696d96e0ed7d7b.exe.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 37KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE