Behavioral task
behavioral1
Sample
c67fcb51c7f0ef47cc8064ae9dfd8b514508dc34785079f1ea44c7dfcc6621f4.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
c67fcb51c7f0ef47cc8064ae9dfd8b514508dc34785079f1ea44c7dfcc6621f4.exe
Resource
win10v2004-20240802-en
General
-
Target
c67fcb51c7f0ef47cc8064ae9dfd8b514508dc34785079f1ea44c7dfcc6621f4
-
Size
44KB
-
MD5
68907302a7e2ae63ba2c1400701d98fc
-
SHA1
b072aedf4768115f07498d50511d2feec4690408
-
SHA256
c67fcb51c7f0ef47cc8064ae9dfd8b514508dc34785079f1ea44c7dfcc6621f4
-
SHA512
5d844872a2dee78c1b397d6e08ffeadb481ba92442ee41cac717310386d96307946801bbbfb25b6d8bac64f7f8ec2e6302cd889b007a8583b4587f98040e21ac
-
SSDEEP
768:CNRArRr3nz5y+bgsDF5I0haNLj1PokgJ4T:CNRAdLnzVF20MBj1PgJ4T
Malware Config
Signatures
-
Smokeloader family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c67fcb51c7f0ef47cc8064ae9dfd8b514508dc34785079f1ea44c7dfcc6621f4
Files
-
c67fcb51c7f0ef47cc8064ae9dfd8b514508dc34785079f1ea44c7dfcc6621f4.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE