Behavioral task
behavioral1
Sample
12b2a34db1f822c089218f1b46c1870462a0afb65ff0364e0f0ba043e93c1e5a.exe
Resource
win7-20241023-en
Behavioral task
behavioral2
Sample
12b2a34db1f822c089218f1b46c1870462a0afb65ff0364e0f0ba043e93c1e5a.exe
Resource
win10v2004-20241007-en
General
-
Target
12b2a34db1f822c089218f1b46c1870462a0afb65ff0364e0f0ba043e93c1e5a
-
Size
29KB
-
MD5
a7732204d9c883a4373c8b615c97de43
-
SHA1
017de30fc0647908eb8dd532982ce6644fb13e59
-
SHA256
12b2a34db1f822c089218f1b46c1870462a0afb65ff0364e0f0ba043e93c1e5a
-
SHA512
36f39ecbb0f771420575d3e753911b7a60777d630c70b87947a1981d019b2c8dd1c76d9fe19aaf4c08465da5de47a83aa5f780b15d95e098043ace8c2e6b9276
-
SSDEEP
768:a5uPwUDiUmbMia7jjXe+yOyddsQCrBwD7:a5uIFUmbJa7jwFCrB
Malware Config
Signatures
-
Smokeloader family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 12b2a34db1f822c089218f1b46c1870462a0afb65ff0364e0f0ba043e93c1e5a
Files
-
12b2a34db1f822c089218f1b46c1870462a0afb65ff0364e0f0ba043e93c1e5a.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE