Behavioral task
behavioral1
Sample
4e1caaf99e1e284027487ac7cd4bf2279724e85c181d44302e15ad34191eca85N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
4e1caaf99e1e284027487ac7cd4bf2279724e85c181d44302e15ad34191eca85N.exe
Resource
win10v2004-20241007-en
General
-
Target
4e1caaf99e1e284027487ac7cd4bf2279724e85c181d44302e15ad34191eca85N
-
Size
46KB
-
MD5
8240e0da868d7e6d6fefcbe35d544820
-
SHA1
70b1504139b7d3f93fe942f0f66e7b78f05ba0ec
-
SHA256
4e1caaf99e1e284027487ac7cd4bf2279724e85c181d44302e15ad34191eca85
-
SHA512
a17057668ef7659a62fbee5b024b873ec7431780493c0ab2c4a589b89d9fb052008e09600ae6957e62d3670bcfbf45c255e7e137edfc35eee4b29ebc61c311df
-
SSDEEP
384:K9VD6tee+qUOTd2opQTLAdz1SvNmhpdvOjT7PbA6HBiTSnjxZMdP05ldpRMaYIBI:k6Qe+qUv8zcqdvOXA6XkPslJvGaVW
Malware Config
Signatures
-
Smokeloader family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4e1caaf99e1e284027487ac7cd4bf2279724e85c181d44302e15ad34191eca85N
Files
-
4e1caaf99e1e284027487ac7cd4bf2279724e85c181d44302e15ad34191eca85N.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 29KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE