Static task
static1
Behavioral task
behavioral1
Sample
malware_smoke_2685359676.exe
Resource
win7-20220901-en
General
-
Target
malware_smoke_2685359676
-
Size
1.0MB
-
MD5
709ac17aa5df3c0524aea20526c972a8
-
SHA1
7ca26cff5ad3877c54539b14b85267689e9167b0
-
SHA256
2115604b92baedae0ce00d0999b30ce95ef4b7a500394d93ff0964058564b86f
-
SHA512
0f6aa767a8103600b708d5f67b06c0c07c7ee810c30138d63715e3333dc6dd8065cea54992fb7002fff1efb3aa12a3f1b270209f833f579cf8fd40850bc553c4
-
SSDEEP
24576:Ur9ateFHxSeaj01+U/76idwZmmA2E5R4Fn3Z5Uhp/1fKbEWA:UdHxb801+U/e3A2E5SF3Zqhp1fKb
Malware Config
Signatures
Files
-
malware_smoke_2685359676.exe windows x86
3c67723834109a4e27e5ad3093789102
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
InterlockedIncrement
OpenJobObjectA
ZombifyActCtx
GetModuleHandleW
GetConsoleAliasesA
GetConsoleTitleA
LoadLibraryW
WriteConsoleW
GetModuleFileNameW
GetOverlappedResult
GetLongPathNameW
SetLastError
FreeLibrary
SetFileAttributesA
LocalAlloc
MoveFileA
WriteProfileSectionW
GetModuleFileNameA
GetConsoleTitleW
EnumDateFormatsW
GetShortPathNameW
GetFileInformationByHandle
InterlockedPushEntrySList
GetProcAddress
lstrcpynA
LCMapStringW
HeapReAlloc
InterlockedDecrement
Sleep
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
EncodePointer
DecodePointer
GetLastError
HeapFree
GetCommandLineA
HeapSetInformation
GetStartupInfoW
RtlUnwind
HeapAlloc
IsProcessorFeaturePresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
GetCurrentProcess
HeapCreate
SetHandleCount
GetStdHandle
InitializeCriticalSectionAndSpinCount
GetFileType
SetFilePointer
CloseHandle
RaiseException
ExitProcess
WriteFile
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetCurrentThreadId
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
HeapSize
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
GetStringTypeW
MultiByteToWideChar
GetConsoleCP
GetConsoleMode
SetStdHandle
FlushFileBuffers
CreateFileW
winhttp
WinHttpSetDefaultProxyConfiguration
Sections
.text Size: 933KB - Virtual size: 932KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 26KB - Virtual size: 59KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 57KB - Virtual size: 1.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ