Behavioral task
behavioral1
Sample
ce35282f1644dfefdacbd33213a6974a37a5a3c111200b2f0d1e043a5ec88a0a.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ce35282f1644dfefdacbd33213a6974a37a5a3c111200b2f0d1e043a5ec88a0a.exe
Resource
win10v2004-20241007-en
General
-
Target
ce35282f1644dfefdacbd33213a6974a37a5a3c111200b2f0d1e043a5ec88a0a
-
Size
28KB
-
MD5
dbf970cf19ba0378330dec74f86d25a9
-
SHA1
2171c989053ef204425617b318a589354efb8edd
-
SHA256
ce35282f1644dfefdacbd33213a6974a37a5a3c111200b2f0d1e043a5ec88a0a
-
SHA512
673915eb8fcb0844ed10a8cfee28d65b85f8d157b7ba986d2dfe86ba2e54f5db9a73095033201839ecc7d0983fbbed8f0deb63c2b02352b9d88ec5b3e2877415
-
SSDEEP
768:W9F6FTUOWg7rPxGvkKRaRpgXc7lxAX7Eu3B2TO0V5Cbbh9wl:W9cFcg7rPxGMFrgsZxo7vgTrViM
Malware Config
Signatures
-
Smokeloader family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ce35282f1644dfefdacbd33213a6974a37a5a3c111200b2f0d1e043a5ec88a0a
Files
-
ce35282f1644dfefdacbd33213a6974a37a5a3c111200b2f0d1e043a5ec88a0a.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE