smokeloader | 3060-3-0x0000000000400000-0x000000000040B000-memory[.]dmp

General

Target
3060-3-0x0000000000400000-0x000000000040B000-memory.dmp
Size 44KB
Sample240622-ptg7kayblh
SHA256 e4118e6bd42b14178e604af972633dd1939a048b4dc2a01373cd5fdab4e6f33b
MD5 8f807f82b9e48acaff156b23c4c92eaa
SHA1 b12d4d7c50ee38371f0adc0382b3217b34b8d588
SHA512 587e9d432a827f72286a02bfb0483583e27562a170d341f060ecb79e91407233ca499eb43e332ccd9bf852bcc5aee35818fc0d9229431eeca33c1d260c493e72
SSDEEP 768:xLtE5GKwQb4tpITHhRx3kwfOX5VAEMiyQjEDlrSlV:fE5GVa48THhRhfOX7AtZDJS/
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

pub2 smokeloader

Family

Botnet

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3060-3-0x0000000000400000-0x000000000040B000-memory.dmp

SHA256 e4118e6bd42b14178e604af972633dd1939a048b4dc2a01373cd5fdab4e6f33b
MD5 8f807f82b9e48acaff156b23c4c92eaa
SHA1 b12d4d7c50ee38371f0adc0382b3217b34b8d588
SHA512 587e9d432a827f72286a02bfb0483583e27562a170d341f060ecb79e91407233ca499eb43e332ccd9bf852bcc5aee35818fc0d9229431eeca33c1d260c493e72
SSDEEP 768:xLtE5GKwQb4tpITHhRx3kwfOX5VAEMiyQjEDlrSlV:fE5GVa48THhRhfOX7AtZDJS/
MD5 SHA1 SHA512 SSDEEP

Minor OS version

0

Major OS version

1

Entry point

13071

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths