Static task
static1
Behavioral task
behavioral1
Sample
malware_smoke_185581917.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
malware_smoke_185581917.exe
Resource
win10v2004-20220812-en
General
-
Target
malware_smoke_185581917
-
Size
310KB
-
MD5
494744a731922c362b48f88baff9b8ad
-
SHA1
869f74d5667e9809b89af3e0e429f08facde4192
-
SHA256
60023b604c7e3682c60cf7e3744c8526c031aea99448a6a72961b81ce21f3bfc
-
SHA512
87a143963ca69a12ac5c76aa5ffdb607069e0976e1cc567707033012b8e3778099054cce5f8992cafe22df4d0c8fc03047c18fc7459b73a3bd4725c1722cf221
-
SSDEEP
6144:2z8ie6YsXrARQmK8iUuj9ngfDdpGH+fet3Agp0q9ygbX+1RzDU8hhmr5:0JYsXvp9YhpGH+saMJcR/VhI
Malware Config
Signatures
Files
-
malware_smoke_185581917.exe windows x64
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 292KB - Virtual size: 292KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 17KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ