Behavioral task
behavioral1
Sample
payload.exe
Resource
win10ltsc2021-20250128-en
windows10-ltsc 2021-x64
4 signatures
150 seconds
General
-
Target
payload.bin
-
Size
37KB
-
MD5
dafcb6af4224a1f81e65faa087291176
-
SHA1
41fee51a676efdc41009f4f55d9a26c884e7c4ed
-
SHA256
d80fd705f3ff95800961d409d1b78ef3f60a16db259ec26901eba3c131ff3267
-
SHA512
2c6448cf7caf029c9e60ed6203d8eee3d8a869aba8d779bfddc7066cda1dde0641cd0489fe49d32860e4815c3db28a5a234939471469ed52ff44dad914725cdd
-
SSDEEP
768:KYzUlhM+L7oocZXHwsIxgKbc8uU0Ipa9sH+FeEtR2G:ZzUlpewNgUGDR2G
Score
10/10
Malware Config
Signatures
-
Smokeloader family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource payload.bin
Files
-
payload.bin.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE