Behavioral task
behavioral1
Sample
0654f16d4c2f7738d68e87ad0afedfe8e534bf1c17073d969a0e4a0a6383df2e.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
0654f16d4c2f7738d68e87ad0afedfe8e534bf1c17073d969a0e4a0a6383df2e.exe
Resource
win10v2004-20240802-en
General
-
Target
0654f16d4c2f7738d68e87ad0afedfe8e534bf1c17073d969a0e4a0a6383df2e.exe
-
Size
40KB
-
MD5
9fa16b0731670c52787474e4afd46bb5
-
SHA1
55aff02f1679000370f4d5f2bd24944d61fa9c0c
-
SHA256
0654f16d4c2f7738d68e87ad0afedfe8e534bf1c17073d969a0e4a0a6383df2e
-
SHA512
0d9f5f61d2f9033235ba9abd364c7edced5c3f73d104cc3a285bec07c949be05fd8326b8e1333de2aa4a0101461ead39f3326e28dea438598942f51ee1f84919
-
SSDEEP
768:CazBIa4ueiy5pj0FvY9NSiNUzhHzp587z78Lj946ZYlueKZN:tguWjtSiN2lz/e7kcueKZN
Malware Config
Signatures
-
Smokeloader family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0654f16d4c2f7738d68e87ad0afedfe8e534bf1c17073d969a0e4a0a6383df2e.exe
Files
-
0654f16d4c2f7738d68e87ad0afedfe8e534bf1c17073d969a0e4a0a6383df2e.exe.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE