Behavioral task
behavioral1
Sample
9119c44aa9413a1065ab9ad1d5e060a6d2a531fef1c95f34409b1697bc9538f5.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
9119c44aa9413a1065ab9ad1d5e060a6d2a531fef1c95f34409b1697bc9538f5.exe
Resource
win10v2004-20241007-en
General
-
Target
9119c44aa9413a1065ab9ad1d5e060a6d2a531fef1c95f34409b1697bc9538f5
-
Size
38KB
-
MD5
e4b9619368bb4ba38abc708929835f12
-
SHA1
33ead284ef4cc8d808063c7398cbbe6cf6e68794
-
SHA256
9119c44aa9413a1065ab9ad1d5e060a6d2a531fef1c95f34409b1697bc9538f5
-
SHA512
f1be2c6a79b8aabc639cc7a7e38d7bb2fb9054d2107d0ab7359174ca06e949968d7ff3e7ca381f7a530ff9c462f900b0e6384dbf42909863df830e026f21ac83
-
SSDEEP
384:K9VD6tee+qUOTd2opQTLAdz1SvNmhpdvOjT7PbA6HBiTSnjxZMdP05ldpRMaYIBI:k6Qe+qUv8zcqdvOXA6XkPslJvGaVW
Malware Config
Signatures
-
Smokeloader family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 9119c44aa9413a1065ab9ad1d5e060a6d2a531fef1c95f34409b1697bc9538f5
Files
-
9119c44aa9413a1065ab9ad1d5e060a6d2a531fef1c95f34409b1697bc9538f5.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 29KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE