Behavioral task
behavioral1
Sample
3d1e4d1c9809518ecedf055b584f7ffb4c5b9aa080a03e3b80a118d2422104da_dump.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
3d1e4d1c9809518ecedf055b584f7ffb4c5b9aa080a03e3b80a118d2422104da_dump.exe
Resource
win10v2004-20240802-en
General
-
Target
3d1e4d1c9809518ecedf055b584f7ffb4c5b9aa080a03e3b80a118d2422104da_dump.exe
-
Size
40KB
-
MD5
1b664a23f881c60ec23031e181ce4324
-
SHA1
d3e36318bb4e11b12d7c44a835acbef5c89d928d
-
SHA256
bed232051212c4580d213435adadb0a256a7aaa3e7f2279374e0cea9293de1ca
-
SHA512
8a1d6d4a2277a9f2a1456db69df2532b3ecebd178fd9ecf833720d43fec0786c4551e0dc96ea106370d244c4cab0d30fc1c77d23aa47ee0c1d66be3ae590b9f4
-
SSDEEP
768:CNRArpFDnz5y+bgsDF5I0haNLj1PokgJ4T:CNRAfnzVF20MBj1PgJ4T
Malware Config
Signatures
-
Smokeloader family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3d1e4d1c9809518ecedf055b584f7ffb4c5b9aa080a03e3b80a118d2422104da_dump.exe
Files
-
3d1e4d1c9809518ecedf055b584f7ffb4c5b9aa080a03e3b80a118d2422104da_dump.exe.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE