Static task
static1
Behavioral task
behavioral1
Sample
malware_smoke_3061005942.exe
Resource
win7-20220901-en
General
-
Target
malware_smoke_3061005942
-
Size
1.1MB
-
MD5
2141a496f9a9d04a7a28caef9e888fed
-
SHA1
9aa0b33782f87c1c3c77c27c877cb2bb60b4ab5f
-
SHA256
e13640666585c0e82d6cc9f3d2dc3a3da66c3a852b646d59bb7cfa97cc39bffd
-
SHA512
80f26f43c73b3a5d336a118e3caec0713f9c9d1df5980534887e8d8fd3a9a1bf2008628e9f425b861baa288df727e60cef482f0b33518eddf861d396bcb19d80
-
SSDEEP
24576:9TwAQDab31LuMbTAf0ZldVmo9I/wQXQihcbDhY7OY:9T716MbTrZtxQXQ+8hEOY
Malware Config
Signatures
Files
-
malware_smoke_3061005942.exe windows x86
773c52d0914f529a889bc69eefc3fe56
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetVolumeMountPointW
GetConsoleAliasesA
GetConsoleTitleA
SetFileTime
FindActCtxSectionStringA
GetVolumePathNameW
GetEnvironmentStrings
GetPrivateProfileIntA
LoadLibraryW
GetLocaleInfoW
LeaveCriticalSection
HeapValidate
ReplaceFileW
GetAtomNameW
SetConsoleTitleA
LCMapStringA
SetFilePointer
GetLastError
GetProcAddress
VirtualAlloc
WriteProfileSectionA
SetStdHandle
SetComputerNameA
WriteConsoleA
LocalAlloc
SetCalendarInfoW
BeginUpdateResourceA
GlobalFindAtomW
GetModuleFileNameA
GetDefaultCommConfigA
GetModuleHandleA
GetFileTime
LocalFree
GetStdHandle
FindFirstChangeNotificationW
GetStartupInfoW
HeapAlloc
EnterCriticalSection
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
SetHandleCount
GetFileType
GetStartupInfoA
DeleteCriticalSection
HeapFree
CloseHandle
GetModuleHandleW
Sleep
ExitProcess
WriteFile
GetModuleFileNameW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
RaiseException
HeapReAlloc
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
WideCharToMultiByte
RtlUnwind
InitializeCriticalSectionAndSpinCount
GetConsoleCP
GetConsoleMode
FlushFileBuffers
LoadLibraryA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
GetConsoleOutputCP
WriteConsoleW
HeapSize
CreateFileA
Sections
.text Size: 1.0MB - Virtual size: 1.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 25KB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ