Behavioral task
behavioral1
Sample
c7c03c2d6a78eb79409a53304bfaf8a69334d2f6a5928db641092bcc39dc8e8d.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
c7c03c2d6a78eb79409a53304bfaf8a69334d2f6a5928db641092bcc39dc8e8d.exe
Resource
win10v2004-20241007-en
General
-
Target
e05ba43da4ea25e9c73e0bfe2269e013e6ce887b375f83d3afc09cf70123a0e2
-
Size
26KB
-
MD5
a7672f6f9b39c24778fd57f386cebbf3
-
SHA1
28a03afac7cdb79d9c0a1f1a6bda0d1fa345ace8
-
SHA256
e05ba43da4ea25e9c73e0bfe2269e013e6ce887b375f83d3afc09cf70123a0e2
-
SHA512
14fe89f1812badd26542d83a956b09ff780613ba53018c09a3e08d2f2802a735effa01622d4f1c8e67e16e5bd690a41aa0b605ea945e52bdfeba8cf135fc1ea0
-
SSDEEP
768:8rus7x3pLaXUTN88Dwq1/R7tigXQdNJzIrUG9:8rdx3p+W68b/Bt/XiYx
Malware Config
Signatures
-
Smokeloader family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/c7c03c2d6a78eb79409a53304bfaf8a69334d2f6a5928db641092bcc39dc8e8d
Files
-
e05ba43da4ea25e9c73e0bfe2269e013e6ce887b375f83d3afc09cf70123a0e2.zip
-
c7c03c2d6a78eb79409a53304bfaf8a69334d2f6a5928db641092bcc39dc8e8d.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 29KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE