Static task
static1
Behavioral task
behavioral1
Sample
malware_smoke_1300718746.exe
Resource
win7-20220812-en
General
-
Target
malware_smoke_1300718746
-
Size
1.0MB
-
MD5
918be9d668bffdec63f184050d4b2883
-
SHA1
63adbf4aeeffe68460bf64f4832c6660193e30c0
-
SHA256
cbced5793450b49eedfaa70e1f569e0d80c336faeac2a5a16a3fc43536b0970d
-
SHA512
564107fa81f0d20874b1d5a524d9a4eba972803324b284b70d0c01147e657609e3818497dcae66195096f643c4c69fd61e5bc8e3da5ec197d235a780aac7f81d
-
SSDEEP
24576:ED+Xqsgozyz8SK0jgiQR5nYuuPsYY9h2yLz8iL5RB:Hasnzy3OF3JuPe9wy
Malware Config
Signatures
Files
-
malware_smoke_1300718746.exe windows x86
da8f63101622de49f3c3ceedca70623c
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
OpenJobObjectA
ZombifyActCtx
GetModuleHandleW
GetConsoleAliasesA
GetConsoleTitleA
LoadLibraryW
WriteConsoleW
GetModuleFileNameW
GetOverlappedResult
GetLongPathNameW
SetLastError
GetProcAddress
FreeLibrary
SetFileAttributesA
LocalAlloc
MoveFileA
WriteProfileSectionW
SetProcessWorkingSetSize
GetModuleFileNameA
GetConsoleTitleW
EnumDateFormatsW
GetShortPathNameW
GetFileInformationByHandle
InterlockedPushEntrySList
lstrcpynA
ReadFile
GetProcessHeap
InterlockedIncrement
InterlockedDecrement
Sleep
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
EncodePointer
DecodePointer
GetLastError
HeapFree
GetCommandLineA
HeapSetInformation
GetStartupInfoW
RtlUnwind
HeapAlloc
IsProcessorFeaturePresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
GetCurrentProcess
HeapCreate
InitializeCriticalSectionAndSpinCount
SetHandleCount
GetStdHandle
GetFileType
SetFilePointer
CloseHandle
RaiseException
ExitProcess
WriteFile
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetCurrentThreadId
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
HeapSize
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
GetStringTypeW
MultiByteToWideChar
GetConsoleCP
GetConsoleMode
CreateFileA
SetStdHandle
FlushFileBuffers
HeapReAlloc
LCMapStringW
SetEndOfFile
CreateFileW
winhttp
WinHttpSetDefaultProxyConfiguration
Sections
.text Size: 941KB - Virtual size: 940KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 26KB - Virtual size: 59KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 88KB - Virtual size: 1016KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ