Static task
static1
Behavioral task
behavioral1
Sample
malware_smoke_1190770884.exe
Resource
win7-20220812-en
General
-
Target
malware_smoke_1190770884
-
Size
1.0MB
-
MD5
5b64b4c975ff001a2d99bf9b65b4b8bb
-
SHA1
a234b171340ca47f2a2fba0705911c61416e8985
-
SHA256
2650817e2703b15c7e6fbf4d4caace2066f50db88fc96862190c4daf32d186e7
-
SHA512
7a923c06534c9d29d9911760ad3b3ebd685806ff2cb157a055616532cf7aeabe362005e6ab38d669087b076840d70f77bbd6f14500fc98b56c4f2cbe6856cd5d
-
SSDEEP
24576:vbahsA6iHbGRj+x7UkpFU/UzPkgSSML3xitJwDSmAESmB:OhsTibGRjM7UkpFRMxqwM
Malware Config
Signatures
Files
-
malware_smoke_1190770884.exe windows x86
324598d8e157ef332c75a6946f19434c
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FreeLibrary
InitializeSListHead
GetModuleHandleW
GetConsoleAliasesA
InitializeCriticalSection
LoadLibraryW
GetFileAttributesW
WriteConsoleW
ReleaseActCtx
GetLastError
GetLongPathNameW
GetProcAddress
lstrcpynA
WriteProfileSectionA
SetFileAttributesA
WriteConsoleA
LocalAlloc
MoveFileA
SetProcessWorkingSetSize
GetModuleFileNameA
WTSGetActiveConsoleSessionId
EnumDateFormatsA
CreateIoCompletionPort
GetConsoleTitleW
GetShortPathNameW
GetFileInformationByHandle
ReadFile
GetProcessHeap
InterlockedIncrement
InterlockedDecrement
Sleep
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
EncodePointer
DecodePointer
GetCommandLineW
HeapSetInformation
GetStartupInfoW
HeapFree
RtlUnwind
HeapAlloc
IsProcessorFeaturePresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
GetCurrentProcess
HeapSize
ExitProcess
InitializeCriticalSectionAndSpinCount
SetHandleCount
GetStdHandle
GetFileType
SetFilePointer
RaiseException
WriteFile
GetModuleFileNameW
FreeEnvironmentStringsW
GetEnvironmentStringsW
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
HeapCreate
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
GetStringTypeW
MultiByteToWideChar
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
HeapReAlloc
CloseHandle
CreateFileA
SetStdHandle
LCMapStringW
FlushFileBuffers
SetEndOfFile
CreateFileW
winhttp
WinHttpSetDefaultProxyConfiguration
Sections
.text Size: 902KB - Virtual size: 901KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 25KB - Virtual size: 58KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 92KB - Virtual size: 1000KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ