Behavioral task
behavioral1
Sample
2584-0-0x0000000000400000-0x000000000040B000-memory.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2584-0-0x0000000000400000-0x000000000040B000-memory.exe
Resource
win10v2004-20240802-en
General
-
Target
2584-0-0x0000000000400000-0x000000000040B000-memory.dmp
-
Size
44KB
-
MD5
d9f4aef343398de101781eaad101df7f
-
SHA1
aec47f96fb26dbc9e18c137c9c4d9d39e6930e1c
-
SHA256
0080d42ef279798e8a99a06128c367b914174d4ea283fe0465282d9530b4238d
-
SHA512
898853e1141f90f911fa9737517c139d717417402047966b9b3813dbb24c4f4ec36e72bda8a4be8a4fae10ab337aa4c3399bd5e15c385ba3d64c57a9de57a9ed
-
SSDEEP
768:RR8yqBqJTIH50gPiSW9uM7/953mpdH5Yvos0tdB80Z1srmN:r8PePKiftV53uV5Ygs0TBymN
Malware Config
Signatures
-
Smokeloader family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2584-0-0x0000000000400000-0x000000000040B000-memory.dmp
Files
-
2584-0-0x0000000000400000-0x000000000040B000-memory.dmp.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE