Behavioral task
behavioral1
Sample
WRFFFGT.txt.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
WRFFFGT.txt.exe
Resource
win10v2004-20241007-en
General
-
Target
WRFFFGT.txt.exe
-
Size
37KB
-
MD5
9c0de297b9ea30ffbe100ee12150f122
-
SHA1
da6096edee23cfd59cf90c1e6a3a9146ae9d5ff0
-
SHA256
f7544f07b4468e38e36607b5ac5b3835eac1487e7d16dd52ca882b3d021c19b6
-
SHA512
ee92b7ed7a10febd6f3d9f826b72e1f9f57be2183ae959528b4328411069baa633ee6c1b1f5beda76c8616e4f8e56fa24a7a2076f84cc400402551e61cf95721
-
SSDEEP
384:sKZ1vXmx5SW6+aWmDVRuLMROLHrN/DKMtoCDl67us6lmXBhXSSS5d8P38lH9yvLJ:NvKaWmOvZxlV5AXHSLd8Uldyvjwt
Malware Config
Signatures
-
Smokeloader family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource WRFFFGT.txt.exe
Files
-
WRFFFGT.txt.exe.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE