Behavioral task
behavioral1
Sample
f7544f07b4468e38e36607b5ac5b3835eac1487e7d16dd52ca882b3d021c19b6.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f7544f07b4468e38e36607b5ac5b3835eac1487e7d16dd52ca882b3d021c19b6.exe
Resource
win10v2004-20241007-en
General
-
Target
20213529363.zip
-
Size
28KB
-
MD5
d9c6e91019379dd40dfec55a30d9fa67
-
SHA1
36b95a2a3121f2092c6c0386030b7f53e8df33d8
-
SHA256
2cb6c89c9e9f7e2b868a4772fb01df46437e8a6dc3a7d02dbc328b6a999fdadb
-
SHA512
6c895df04d6297f271923605cffd78681ae51b97f7431733f10d0f060184cb95efef34ef25a26fb10fdb2b0593919fa7dc64330a1ded23d584c04a548c9f1517
-
SSDEEP
768:ImIG/Ua5H864j2W/Vqe8iy7g018ywc6f8FrUOG:Iba5c2Ce7NaGO8lUD
Malware Config
Signatures
-
Smokeloader family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/f7544f07b4468e38e36607b5ac5b3835eac1487e7d16dd52ca882b3d021c19b6
Files
-
20213529363.zip.zip
Password: infected
-
f7544f07b4468e38e36607b5ac5b3835eac1487e7d16dd52ca882b3d021c19b6.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE