Static task
static1
Behavioral task
behavioral1
Sample
malware_smoke_3795585950.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
malware_smoke_3795585950.exe
Resource
win10v2004-20220812-en
General
-
Target
malware_smoke_3795585950
-
Size
832KB
-
MD5
9c66646af984ef09980b8d0e6626f563
-
SHA1
f60a2061aee55c80feabbbc0225654ce8d71b2fe
-
SHA256
1ef35062c5acc29d412e90c71910dd6af2e7c9a3c5d6f3284171e03a71178162
-
SHA512
5e3b4ef323c3a11a59cdd9192e4d872eb4c39965cd9863bf513a0f4c06e6c539f7402df663cbb82b68f8e181ed78dc0a445ed1ae4ed57ff62cd17620cc903a16
-
SSDEEP
24576:yJzjSOxOP3VcItWwa+nrBZNazrMxBxwTL8w:weOxOPWQRFdyrSrVw
Malware Config
Signatures
Files
-
malware_smoke_3795585950.exe windows x86
5e1f63f34b43ecfa62fae8fb0ed58ea9
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FindCloseChangeNotification
GlobalAlloc
GetPrivateProfileIntA
LoadLibraryW
GetLocaleInfoW
GetVersionExW
GetVolumePathNameA
SetConsoleTitleA
GetTempPathW
LCMapStringA
EnumSystemLocalesA
GetStdHandle
GetProcAddress
VirtualAlloc
HeapSize
BeginUpdateResourceW
GetEnvironmentStringsW
EnterCriticalSection
LoadLibraryA
WriteConsoleA
SetCalendarInfoW
MoveFileA
BeginUpdateResourceA
SetConsoleWindowInfo
GetModuleFileNameA
GetDefaultCommConfigA
GetConsoleTitleW
GetFileTime
SetFileValidData
LocalFree
GetLocaleInfoA
InterlockedIncrement
WriteProfileSectionA
GetComputerNameA
CreateFileA
GetCommandLineA
GetStartupInfoA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapAlloc
GetCPInfo
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
GetModuleHandleW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
GetLastError
HeapFree
CloseHandle
LeaveCriticalSection
Sleep
ExitProcess
WriteFile
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
SetHandleCount
GetFileType
DeleteCriticalSection
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
SetFilePointer
GetConsoleCP
GetConsoleMode
HeapReAlloc
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
GetModuleHandleA
SetStdHandle
FlushFileBuffers
RtlUnwind
InitializeCriticalSectionAndSpinCount
GetConsoleOutputCP
WriteConsoleW
user32
WindowFromPoint
gdi32
GetFontUnicodeRanges
winhttp
WinHttpCloseHandle
Sections
.text Size: 695KB - Virtual size: 694KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 32KB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 104KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ