Static task
static1
Behavioral task
behavioral1
Sample
malware_smoke_3739371147.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
malware_smoke_3739371147.exe
Resource
win10v2004-20220812-en
General
-
Target
malware_smoke_3739371147
-
Size
390KB
-
MD5
faaa1e11382a1431ea29387a78b58660
-
SHA1
aa2e83c4740a1fe4d2c6669758794064e248d588
-
SHA256
6add029451fb2375c5f0648046d7959fd7f1143a108a3a4ab17aece21e66a3fe
-
SHA512
2a5336c479fe8ed561f29aef183d18cd8c74b70e11a7a61b574046a6d991f82618d0604c61e56e3b6c7aead820c9fb5c4c6ef66afda1da13f769baf5949f770f
-
SSDEEP
6144:GLa12ZACGcXRjfYIJs8MGYDDQ1Q91bwgo3ovYWd6vaqWTD:SBACGcXRjfnJODE1Qvo2v
Malware Config
Signatures
Files
-
malware_smoke_3739371147.exe windows x86
35d124b1f9b7d4228dae57924d7c22c8
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetNamedPipeHandleStateW
FileTimeToSystemTime
EnumResourceTypesW
EnumResourceNamesW
ExitProcess
SetLastError
GetVersionExW
VerifyVersionInfoW
QueryDepthSList
FillConsoleOutputCharacterW
SetEvent
FindNextFileA
GetCompressedFileSizeW
CopyFileExW
BuildCommDCBAndTimeoutsA
ReadConsoleOutputCharacterA
SetDefaultCommConfigA
VerLanguageNameA
EscapeCommFunction
WritePrivateProfileStructW
FreeEnvironmentStringsA
CreateTimerQueue
FindNextVolumeMountPointW
GetWriteWatch
WriteConsoleInputA
SetComputerNameExW
FindAtomA
GlobalDeleteAtom
SetThreadPriority
CallNamedPipeW
GetDriveTypeW
VirtualProtect
LoadLibraryW
LocalAlloc
InterlockedDecrement
FindFirstChangeNotificationA
VerifyVersionInfoA
FormatMessageW
SetDllDirectoryW
GetModuleHandleW
WritePrivateProfileStringA
GetUserDefaultLangID
TerminateProcess
GlobalUnfix
GetStartupInfoW
GetSystemWow64DirectoryW
CopyFileA
GetLastError
DebugBreak
SetConsoleCursorInfo
SetCalendarInfoA
SetConsoleScreenBufferSize
ContinueDebugEvent
InterlockedExchangeAdd
GetSystemWindowsDirectoryW
FindFirstVolumeA
GetPrivateProfileStringW
CreateActCtxA
GetConsoleAliasW
OutputDebugStringW
EnumResourceTypesA
lstrlenA
WriteConsoleW
DeleteCriticalSection
GlobalWire
FreeEnvironmentStringsW
lstrcatA
EnumCalendarInfoA
SetThreadAffinityMask
LockFile
RaiseException
VerSetConditionMask
SetConsoleCP
GetProfileStringA
CreateIoCompletionPort
AllocConsole
GlobalGetAtomNameA
SetComputerNameA
GetConsoleAliasExesLengthW
WriteConsoleInputW
CreateMailslotW
SetCommState
MoveFileWithProgressA
GetSystemTimeAdjustment
_hread
_lopen
EnumSystemLocalesW
GetConsoleAliasExesLengthA
MoveFileA
ResetWriteWatch
GetModuleHandleA
EnumDateFormatsW
DeleteAtom
GetSystemWindowsDirectoryA
GetComputerNameW
GetConsoleAliasesLengthA
CancelDeviceWakeupRequest
AreFileApisANSI
OpenWaitableTimerA
OpenFileMappingA
SetProcessAffinityMask
GetConsoleAliasesLengthW
SetProcessShutdownParameters
FindNextVolumeMountPointA
ReadConsoleW
WriteConsoleOutputCharacterA
GetNumberFormatW
GetConsoleAliasExesA
GetBinaryTypeA
GetCurrentActCtx
InitializeCriticalSection
WriteProfileSectionA
SetLocaleInfoA
GetACP
LoadLibraryA
DeleteFileA
GetCommandLineA
GetStartupInfoA
HeapValidate
IsBadReadPtr
EnterCriticalSection
LeaveCriticalSection
GetModuleFileNameW
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
Sleep
InterlockedIncrement
GetProcAddress
TlsGetValue
TlsAlloc
TlsSetValue
GetCurrentThreadId
TlsFree
SetHandleCount
GetStdHandle
GetFileType
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetModuleFileNameA
GetEnvironmentStrings
WideCharToMultiByte
GetEnvironmentStringsW
HeapDestroy
HeapCreate
HeapFree
VirtualFree
WriteFile
HeapAlloc
HeapSize
HeapReAlloc
VirtualAlloc
GetOEMCP
GetCPInfo
IsValidCodePage
RtlUnwind
InitializeCriticalSectionAndSpinCount
OutputDebugStringA
SetFilePointer
GetConsoleCP
GetConsoleMode
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
FlushFileBuffers
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
CloseHandle
CreateFileA
gdi32
GetCharWidth32A
advapi32
ImpersonateSelf
Sections
.text Size: 146KB - Virtual size: 145KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 172KB - Virtual size: 335KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 56KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ