Static task
static1
Behavioral task
behavioral1
Sample
malware_smoke_3067449412.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
malware_smoke_3067449412.exe
Resource
win10v2004-20220901-en
General
-
Target
malware_smoke_3067449412
-
Size
1.4MB
-
MD5
dff6939dcebad7e3468b087c3c8980cd
-
SHA1
bba5c5068b9930a0ab69aca42e2d15ba4983aedc
-
SHA256
3cea3f18d21c641fc07c54acf39fabb511b3ac3128e289a731d74f9f42bf6977
-
SHA512
bb9f128c91531cc071ce635e5a9cfdedb21773178718e0d5fb3635a3e4577339d9826ae45bb7ec99b69983b681794f7345d9faba89297cef5d2266bd22e5e3d3
-
SSDEEP
24576:jB9fTo+wwNRMP4z4wf/sP7AJya+fPgMopsSj:jzTo+yP0X+1aEI9
Malware Config
Signatures
Files
-
malware_smoke_3067449412.exe windows x86
75dd1d4b0e70e28a16b22ef5e7da4bbc
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
user32
ReleaseDC
advapi32
RegCloseKey
comctl32
DllGetVersion
mscoree
_CorExeMain
shell32
SHGetIconOverlayIndexA
Sections
.text Size: - Virtual size: 240KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
CODE Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 959KB - Virtual size: 959KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.pdata Size: 102KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 378KB - Virtual size:
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE