Static task
static1
Behavioral task
behavioral1
Sample
malware_smoke_193871350.exe
Resource
win7-20220812-en
General
-
Target
malware_smoke_193871350
-
Size
1.0MB
-
MD5
d4ec6a8ee6d40ea034dcbb75059154cb
-
SHA1
4578566122e5df6e565508d675a1f0df8026df84
-
SHA256
bde3e0878d5d18e4779720ae17c2af24616ec1e7f2dd30325591916bec38c368
-
SHA512
4d1d38d5a113694ae7e2cc3aa54f339ef42a5e455e07e2e7156bdcdcdc0186923baa963917d1adbf5f9a9dad02be7b8545a02a2a04bd66a75cb5c3c6df55a2a9
-
SSDEEP
24576:s59pejGNBSEPA9lb+nTdRwH28vzhtXBL3pYSFzCB:Apej8ulSTdRwfhtXBrx
Malware Config
Signatures
Files
-
malware_smoke_193871350.exe windows x86
324598d8e157ef332c75a6946f19434c
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FreeLibrary
InitializeSListHead
GetModuleHandleW
GetConsoleAliasesA
InitializeCriticalSection
LoadLibraryW
GetFileAttributesW
WriteConsoleW
ReleaseActCtx
GetLastError
GetLongPathNameW
GetProcAddress
lstrcpynA
WriteProfileSectionA
SetFileAttributesA
WriteConsoleA
LocalAlloc
MoveFileA
SetProcessWorkingSetSize
GetModuleFileNameA
WTSGetActiveConsoleSessionId
EnumDateFormatsA
CreateIoCompletionPort
GetConsoleTitleW
GetShortPathNameW
GetFileInformationByHandle
ReadFile
GetProcessHeap
InterlockedIncrement
InterlockedDecrement
Sleep
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
EncodePointer
DecodePointer
GetCommandLineW
HeapSetInformation
GetStartupInfoW
HeapFree
RtlUnwind
HeapAlloc
IsProcessorFeaturePresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
GetCurrentProcess
HeapSize
ExitProcess
InitializeCriticalSectionAndSpinCount
SetHandleCount
GetStdHandle
GetFileType
SetFilePointer
RaiseException
WriteFile
GetModuleFileNameW
FreeEnvironmentStringsW
GetEnvironmentStringsW
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
HeapCreate
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
GetStringTypeW
MultiByteToWideChar
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
HeapReAlloc
CloseHandle
CreateFileA
SetStdHandle
LCMapStringW
FlushFileBuffers
SetEndOfFile
CreateFileW
winhttp
WinHttpSetDefaultProxyConfiguration
Sections
.text Size: 902KB - Virtual size: 902KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 25KB - Virtual size: 58KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 92KB - Virtual size: 1000KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ