Static task
static1
Behavioral task
behavioral1
Sample
malware_smoke_2981444793.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
malware_smoke_2981444793.exe
Resource
win10v2004-20220812-en
General
-
Target
malware_smoke_2981444793
-
Size
703KB
-
MD5
6cd2cd149294bdb93f2756b654d9a800
-
SHA1
fc0eb612ebf10a39d0ed0f996d08a92daed3c277
-
SHA256
1b4fcd8497e6003009010a19abaa8981366922be96e93a84e30ca2885476ccd7
-
SHA512
dff663d0cfe4452972b6a5723b962af14f1bf330ff91f0bc1e9d69b9eb16d61091aba2bc834ab1867aca08cccc560b2d6a9848a840c0dde1c1ee1b13ec6c7f04
-
SSDEEP
12288:4ugeT75aRPrTva5xC+nFcBb1r8Ls3CYO9/rnJlLK3WF9U2epIfI3cGbhgUuxNLY8:4s/4RPHva5xLm5p8U5OR7Jl6WmifIphw
Malware Config
Signatures
Files
-
malware_smoke_2981444793.exe windows x86
47ff9ea918381bfbc7a952d487ef6da4
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
user32
UpdateWindow
advapi32
RegQueryValueA
comctl32
InitCommonControlsEx
mscoree
_CorExeMain
shell32
SHChangeNotifyRegister
Sections
BSS Size: - Virtual size: 220KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
BSS Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 248KB - Virtual size: 248KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.adata Size: 95KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE