Static task
static1
Behavioral task
behavioral1
Sample
malware_smoke_3333644975.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
malware_smoke_3333644975.exe
Resource
win10v2004-20220812-en
General
-
Target
malware_smoke_3333644975
-
Size
390KB
-
MD5
ae17f41bdf04a178eca33b352304aafa
-
SHA1
8f24baaeb337f44959e205ed88fadabd3565e603
-
SHA256
217911afc2c80d00f08f0702deb7a456f175fa7a7893d36502e0fe5f3c8b990e
-
SHA512
17de04bfcf676f744875c204a35fe72abb53353fab1bee4773af25d14ec9f9135e2c3fb5033421d61f6cfd9fa4edd733cdb3ba2a5744f3f805789faebbaaa643
-
SSDEEP
6144:bt6aCtqY2xa0E9iAsbcCF4YCbdOGx6/iYBBV5pOhi0chqCjM:R6rqY2xlE9tsFqYeOu6qYfpuinM
Malware Config
Signatures
Files
-
malware_smoke_3333644975.exe windows x86
572a744f56a4e2bcc7d6b36f63ee015c
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetNamedPipeHandleStateW
FileTimeToSystemTime
EnumResourceTypesW
EnumResourceNamesW
FillConsoleOutputCharacterW
GetTimeZoneInformation
TerminateProcess
SetLastError
SetEvent
FindNextFileA
GetCompressedFileSizeW
CopyFileExW
BuildCommDCBAndTimeoutsA
QueryDepthSList
GetVersionExW
VerifyVersionInfoW
ReadConsoleOutputCharacterA
SetDefaultCommConfigA
VerLanguageNameA
EscapeCommFunction
WritePrivateProfileStructW
FreeEnvironmentStringsA
CreateTimerQueue
FindNextVolumeMountPointW
GetWriteWatch
WriteConsoleInputA
SetComputerNameExW
FindAtomA
GlobalDeleteAtom
SetThreadPriority
CallNamedPipeW
GetDriveTypeW
VirtualProtect
LoadLibraryW
LocalAlloc
InterlockedDecrement
FindFirstChangeNotificationA
VerifyVersionInfoA
FormatMessageW
SetDllDirectoryW
GetModuleHandleA
WritePrivateProfileStringA
GetUserDefaultLangID
GlobalUnfix
GetStartupInfoW
GetSystemWow64DirectoryW
CopyFileA
GetLastError
DebugBreak
SetConsoleCursorInfo
SetCalendarInfoA
SetConsoleScreenBufferSize
ContinueDebugEvent
InterlockedExchangeAdd
GetSystemWindowsDirectoryW
FindNextVolumeW
GetPrivateProfileStringW
CreateActCtxA
GetConsoleAliasW
OutputDebugStringW
EnumResourceTypesA
lstrlenA
WriteConsoleW
DeleteCriticalSection
GlobalWire
FreeEnvironmentStringsW
lstrcatA
EnumCalendarInfoA
SetThreadAffinityMask
LockFile
RaiseException
VerSetConditionMask
SetConsoleCP
GetProfileStringA
CreateIoCompletionPort
AllocConsole
GlobalGetAtomNameA
SetComputerNameA
GetConsoleAliasExesLengthW
WriteConsoleInputW
CreateMailslotW
GetCommState
MoveFileWithProgressA
GetSystemTimeAdjustment
_hread
_lopen
EnumSystemLocalesW
GetConsoleAliasExesLengthA
MoveFileA
ResetWriteWatch
EnumDateFormatsW
DeleteAtom
GetSystemWindowsDirectoryA
GetComputerNameW
GetConsoleAliasesLengthA
FindFirstVolumeW
CancelDeviceWakeupRequest
AreFileApisANSI
OpenWaitableTimerA
OpenFileMappingA
SetProcessAffinityMask
GetConsoleAliasesLengthW
SetProcessShutdownParameters
FindNextVolumeMountPointA
ReadConsoleW
WriteConsoleOutputCharacterA
GetNumberFormatW
GetConsoleAliasExesA
GetBinaryTypeA
GetCurrentActCtx
InitializeCriticalSection
WriteProfileSectionA
SetLocaleInfoA
GetACP
LoadLibraryA
GetModuleHandleW
Sleep
InterlockedIncrement
GetProcAddress
ExitProcess
DeleteFileA
GetCommandLineA
GetStartupInfoA
HeapValidate
IsBadReadPtr
EnterCriticalSection
LeaveCriticalSection
GetModuleFileNameW
TlsGetValue
TlsAlloc
TlsSetValue
GetCurrentThreadId
TlsFree
GetModuleFileNameA
WriteFile
GetStdHandle
GetOEMCP
GetCPInfo
IsValidCodePage
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
InitializeCriticalSectionAndSpinCount
SetHandleCount
GetFileType
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStrings
WideCharToMultiByte
GetEnvironmentStringsW
HeapDestroy
HeapCreate
HeapFree
VirtualFree
HeapAlloc
HeapSize
HeapReAlloc
VirtualAlloc
RtlUnwind
OutputDebugStringA
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
SetFilePointer
GetConsoleCP
GetConsoleMode
FlushFileBuffers
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
CloseHandle
CreateFileA
gdi32
GetCharWidth32A
advapi32
ImpersonateSelf
Sections
.text Size: 146KB - Virtual size: 145KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 172KB - Virtual size: 335KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 56KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ