Behavioral task
behavioral1
Sample
6c413bd81dfc74a93fce3095566020ad0222403c7ff6a46573aa2cb77ac53448.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
6c413bd81dfc74a93fce3095566020ad0222403c7ff6a46573aa2cb77ac53448.exe
Resource
win10v2004-20240802-en
General
-
Target
6c413bd81dfc74a93fce3095566020ad0222403c7ff6a46573aa2cb77ac53448
-
Size
44KB
-
MD5
a30a8490808d84a328c4a40e2bf092db
-
SHA1
7ebf23508ec34a59563498043a6e7ff274995be1
-
SHA256
6c413bd81dfc74a93fce3095566020ad0222403c7ff6a46573aa2cb77ac53448
-
SHA512
dedea8e6cf0fd2cec50fe0d7adc82c7b7c61ed733d7aed6ecf5b0ffd249501400032dc48b477fc1d30da649fa8d94683b736f041d8991e622bc7b65ae87ede56
-
SSDEEP
768:O2fN76rUCUsNxrlhRtSEObrfWrZrZZGazbv61kTtnIx1y0qWb:OQNGrIUNP7sbrOZXGaXi1kyG0P
Malware Config
Signatures
-
Smokeloader family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6c413bd81dfc74a93fce3095566020ad0222403c7ff6a46573aa2cb77ac53448
Files
-
6c413bd81dfc74a93fce3095566020ad0222403c7ff6a46573aa2cb77ac53448.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE