loader_smoke[.]exe

General

Target
loader_smoke.exe
Size 5.2MB
Sample261023-asd17aa18l
SHA256 c230506231ad2e7350310cc9968ef425ee8b281f1e0308164370e79154542550
MD5 a7790819e53c2b4061ad7352cfd1c93b
SHA1 4dbb1917efe98e7413e1184d860b188d668ef8b9
SHA512 501278676b71fe38e0c1b9d689bd8f69d18361dfbbb27b7333ce881e88ccc7096c11e55498a93b3077a9708baff2d178cb3435d945c29a3c718f58686ea02807
SSDEEP 98304:wKjHQAOm6lNCFOQ6RMP46R8gak2/KADEt2+4y:w0wfCFtiEt2+3
TLSH
T1A94693A6254EE8A324FFDE9EF2B9CCFD48C344546ADB4C606859CBDB6DACA00C0F4554
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
loader_smoke.exe

File Explorer

loader_smoke.exe

.exe 5.2MB

loader_smoke.exe

IMPHASH 585bdf832eedb7b96e27de6199e9c5d0
SHA256 c230506231ad2e7350310cc9968ef425ee8b281f1e0308164370e79154542550
MD5 a7790819e53c2b4061ad7352cfd1c93b
SHA1 4dbb1917efe98e7413e1184d860b188d668ef8b9
SHA512 501278676b71fe38e0c1b9d689bd8f69d18361dfbbb27b7333ce881e88ccc7096c11e55498a93b3077a9708baff2d178cb3435d945c29a3c718f58686ea02807
SSDEEP 98304:wKjHQAOm6lNCFOQ6RMP46R8gak2/KADEt2+4y:w0wfCFtiEt2+3
TLSH
T1A94693A6254EE8A324FFDE9EF2B9CCFD48C344546ADB4C606859CBDB6DACA00C0F4554
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

6408

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

loader.pdb

loader_smoke.exe

kernel32

generic

Sharing

General

Malware Config

Signatures

File Explorer

loader_smoke.exe

kernel32

generic