Static task
static1
Behavioral task
behavioral1
Sample
malware_smoke_3919209205.exe
Resource
win7-20220812-en
General
-
Target
malware_smoke_3919209205
-
Size
1.1MB
-
MD5
60d2a99785698826e0e18491850275f9
-
SHA1
e9eec4d1303259cce3cd2b7a5ba42b7588aa8928
-
SHA256
87a9598980b61ce629a2e23f9089ead4fd8472fc50cd97513f9935923ad3a885
-
SHA512
ef281cae4a90bbec5b6699aefcfe5db91642871f7a52e8227b6b76fc84b8c53dd588471f59ab92cc60804dbbb4a53a7e04e878c6a6d2eb14ed10d5acf93423cb
-
SSDEEP
24576:JWo9QZzOWN+HjaU3g0FHq9qribpSHsevcS/:45zv+DaAVraQHs8ci
Malware Config
Signatures
Files
-
malware_smoke_3919209205.exe windows x86
30b61c273b1d343ed1b1e7a06292b7df
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ZombifyActCtx
GetEnvironmentStringsW
GetConsoleAliasesA
GetEnvironmentStrings
GlobalAlloc
WideCharToMultiByte
LoadLibraryW
SetVolumeMountPointA
LeaveCriticalSection
HeapValidate
WriteConsoleW
GetAtomNameW
ReplaceFileA
SetLastError
AttachConsole
FindFirstChangeNotificationW
BeginUpdateResourceW
SetStdHandle
LoadLibraryA
AddVectoredExceptionHandler
WriteProfileSectionW
GetModuleFileNameA
GetDefaultCommConfigA
SetConsoleTitleW
GetConsoleTitleW
SetCalendarInfoA
LocalFree
VirtualAlloc
EnumResourceNamesW
HeapAlloc
GetStartupInfoW
RaiseException
RtlUnwind
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetLastError
HeapFree
DeleteCriticalSection
EnterCriticalSection
VirtualFree
HeapReAlloc
HeapCreate
GetModuleHandleW
Sleep
GetProcAddress
ExitProcess
WriteFile
GetStdHandle
SetHandleCount
GetFileType
GetStartupInfoA
SetFilePointer
CloseHandle
GetModuleFileNameW
FreeEnvironmentStringsW
GetCommandLineW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
GetCurrentThreadId
InterlockedDecrement
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeCriticalSectionAndSpinCount
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
GetConsoleCP
GetConsoleMode
MultiByteToWideChar
FlushFileBuffers
HeapSize
GetLocaleInfoA
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
WriteConsoleA
GetConsoleOutputCP
CreateFileA
Sections
.text Size: 1.0MB - Virtual size: 1.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 24KB - Virtual size: 209KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 54KB - Virtual size: 978KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ