Behavioral task
behavioral1
Sample
2544-0-0x0000000000400000-0x000000000040B000-memory.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
2544-0-0x0000000000400000-0x000000000040B000-memory.exe
Resource
win10v2004-20240802-en
General
-
Target
2544-0-0x0000000000400000-0x000000000040B000-memory.dmp
-
Size
44KB
-
MD5
7b700f4d95b93e72bb52f34abd54c761
-
SHA1
97a96245dc9c2be1a0a8866d815f0648f6e764cd
-
SHA256
e61c21f8cea3b8138e5763cc8af89dba0b1342e66d542476aac0d5457957d2e7
-
SHA512
b3f6903972e28c895efe3fbb6c4a3ee3ab6f7b98f62b4acf523e01dc150976eedc265dd06c65007f62bec06866d8344011643129f0da84f8ad147fbf53dc5936
-
SSDEEP
768:RR8yqBqJTIH50gmaZSW9uM7/953mpdH5Yvos0tdB80Z1srmN:r8PeP1gftV53uV5Ygs0TBymN
Malware Config
Signatures
-
Smokeloader family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2544-0-0x0000000000400000-0x000000000040B000-memory.dmp
Files
-
2544-0-0x0000000000400000-0x000000000040B000-memory.dmp.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE