Behavioral task
behavioral1
Sample
7231b59295966497d4a581249d0fd69dcef5de7981d5b3d09039310ca0b875c2.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
7231b59295966497d4a581249d0fd69dcef5de7981d5b3d09039310ca0b875c2.exe
Resource
win10v2004-20240709-en
General
-
Target
7231b59295966497d4a581249d0fd69dcef5de7981d5b3d09039310ca0b875c2.exe
-
Size
40KB
-
MD5
eccdca95898d2ecce04660fad1209c1d
-
SHA1
3be1d8f6d6a75943c1bf7af821d63a1701618f72
-
SHA256
7231b59295966497d4a581249d0fd69dcef5de7981d5b3d09039310ca0b875c2
-
SHA512
4f9f527d78ad54f606bb48a95f898d0fd66dd4020d2dea6787b350eaea85d2cf25e841e7d05a805bb21dbb6520507fd277e20e61aec11d9b8a48db77f041a63d
-
SSDEEP
768:CNRArpFDnz5y+bgsDF5I0haNLj1PokgJ4T:CNRAfnzVF20MBj1PgJ4T
Malware Config
Signatures
-
Smokeloader family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7231b59295966497d4a581249d0fd69dcef5de7981d5b3d09039310ca0b875c2.exe
Files
-
7231b59295966497d4a581249d0fd69dcef5de7981d5b3d09039310ca0b875c2.exe.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE