Static task
static1
Behavioral task
behavioral1
Sample
malware_smoke_2023851858.exe
Resource
win7-20220812-en
General
-
Target
malware_smoke_2023851858
-
Size
1.0MB
-
MD5
9f8317bfddacbaf1f683d0c510eeb3a1
-
SHA1
f068c51bacb11e40a05cfced8f4d2b5b33968706
-
SHA256
5ddd99e29124b4d53e2601159dac900506af9ecb753950adf336d1fa8b96d4cc
-
SHA512
88913e89b9df7b9da1ede38acd782fbc3b61a709ddf54860a0c30afa006241f06464036ea496988cd7d9bd9ccbf77d13671c65f41d50d1910b10e8d8b90d098b
-
SSDEEP
24576:NnK3WqmTAxH1g+HLP0kc8Pwyh39GzhZNB:o3WqmMnXfc8SP
Malware Config
Signatures
Files
-
malware_smoke_2023851858.exe windows x86
324598d8e157ef332c75a6946f19434c
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FreeLibrary
InitializeSListHead
GetModuleHandleW
GetConsoleAliasesA
InitializeCriticalSection
LoadLibraryW
GetFileAttributesW
WriteConsoleW
ReleaseActCtx
GetLastError
GetLongPathNameW
GetProcAddress
lstrcpynA
WriteProfileSectionA
SetFileAttributesA
WriteConsoleA
LocalAlloc
MoveFileA
SetProcessWorkingSetSize
GetModuleFileNameA
WTSGetActiveConsoleSessionId
EnumDateFormatsA
CreateIoCompletionPort
GetConsoleTitleW
GetShortPathNameW
GetFileInformationByHandle
ReadFile
GetProcessHeap
InterlockedIncrement
InterlockedDecrement
Sleep
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
EncodePointer
DecodePointer
GetCommandLineW
HeapSetInformation
GetStartupInfoW
HeapFree
RtlUnwind
HeapAlloc
IsProcessorFeaturePresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
GetCurrentProcess
HeapSize
ExitProcess
InitializeCriticalSectionAndSpinCount
SetHandleCount
GetStdHandle
GetFileType
SetFilePointer
RaiseException
WriteFile
GetModuleFileNameW
FreeEnvironmentStringsW
GetEnvironmentStringsW
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
HeapCreate
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
GetStringTypeW
MultiByteToWideChar
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
HeapReAlloc
CloseHandle
CreateFileA
SetStdHandle
LCMapStringW
FlushFileBuffers
SetEndOfFile
CreateFileW
winhttp
WinHttpSetDefaultProxyConfiguration
Sections
.text Size: 902KB - Virtual size: 902KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 25KB - Virtual size: 58KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 92KB - Virtual size: 1000KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ