Static task
static1
Behavioral task
behavioral1
Sample
malware_smoke_1824058012.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
malware_smoke_1824058012.exe
Resource
win10v2004-20220812-en
General
-
Target
malware_smoke_1824058012
-
Size
540KB
-
MD5
af62a553b67566339e42d059387e6624
-
SHA1
f7c121358da2e767121855793e5a91d487c62dd0
-
SHA256
ea9dde235f5c17e67319665f644fb1079f1525dfa061b210dea1d22e3d008be8
-
SHA512
dba0ef1eceb1f373fd3d6af91f5c85a45e36b111a29e89d0eba45999e1678f24ecef7031cff832472de40cf35da51d86ab750b1dab70803898b335d01681efe8
-
SSDEEP
12288:qn5EVYjd6Ia68Z7pLFZQS03ULaHNqrxlKIQNoHEnXzzUikzAD:q5EVuxa6ypTkEaHNYK30EnDzV
Malware Config
Signatures
Files
-
malware_smoke_1824058012.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
wAMqcbin Size: 70KB - Virtual size: 144KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Sm91YBkF Size: 120KB - Virtual size: 712KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
CbY4Fy9m Size: 32KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
bwSf7GrN Size: 1024B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
VYNreigR Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
B410aoHt Size: 312KB - Virtual size: 316KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
xhfXPWmc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE