malware_smoke_3859288233

Sharing

Copy URL Twitter E-mail

General

Target

malware_smoke_3859288233
Size

1.1MB
MD5

295e63e61687f88413ba235d653e7363
SHA1

a4313dcb27e241e2468caba81a06b69ba80cea7f
SHA256

75007588d800e21da62b27cab74bf29f8ecec2deda4ecf1665e9c23de3b9d2d0
SHA512

5305a6f8d5b4dcf05c2ce8813f8657d9bc320eb2dbd38bee31b2bafd285764ee7ec06495691281c39267a166056cb6a2c5fd17479f770658fb7750b04a172c5e
SSDEEP

24576:/uITNPjFyW9yhQ8UWaBACghX6fa3DQ2nJXwVSid/G9DLm23CJgpS/9sX:rljFySym8UWaBACghX6mxJAV+

Score

N/A

Malware Config

Signatures

Files

malware_smoke_3859288233
.exe windows x86

1d15b973cc32f6a56ede02a9f3077b14

Code Sign

04:54:8d:1a:bf:ed:6a:5c:8f:b2:08:bc:9c:a6:8d:32:fb:c8
Certificate

Issuer

CN=R3,O=Let's Encrypt,C=US

Not Before

28/04/2022, 08:40

Not After

27/07/2022, 08:40

Subject

CN=www.sdr-radio.com

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

Issuer

CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

12/01/2016, 00:00

Not After

11/01/2031, 23:59

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12
Certificate

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

23/12/2017, 00:00

Not After

22/03/2029, 23:59

Subject

CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

9c:30:a2:e0:66:9c:37:6a:ca:44:96:af:d9:26:b0:3b:a0:1f:8f:58:1b:b2:a0:95:e1:8d:38:aa:88:65:ba:07
Signer

Actual PE Digest

9c:30:a2:e0:66:9c:37:6a:ca:44:96:af:d9:26:b0:3b:a0:1f:8f:58:1b:b2:a0:95:e1:8d:38:aa:88:65:ba:07

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=www.sdr-radio.com

26/05/2022, 06:11
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DosDateTimeToFileTime
FreeLibrary
GetCurrentProcess
GetModuleHandleW
VirtualFree
GenerateConsoleCtrlEvent
WriteFile
FindActCtxSectionStringA
GlobalAlloc
ReadProcessMemory
QueryInformationJobObject
RaiseException
GetApplicationRestartSettings
GetLastError
GetProcAddress
VirtualAlloc
LoadLibraryA
SetConsoleWindowInfo
DuplicateHandle
ReadFile
CloseHandle
CreateFileA
HeapFree
HeapAlloc
InterlockedIncrement
InterlockedDecrement
GetStartupInfoW
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapCreate
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
HeapReAlloc
Sleep
ExitProcess
GetStdHandle
GetModuleFileNameA
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
FlushFileBuffers
GetLocaleInfoA
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
GetModuleFileNameW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeCriticalSectionAndSpinCount
RtlUnwind
LCMapStringA
LCMapStringW
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetFilePointer
SetStdHandle
HeapSize
GetModuleHandleA

user32

MessageBoxW

ole32

CreateDataCache

oleaut32

DosDateTimeToVariantTime

Sections

.text
Size: 1.0MB - Virtual size: 1.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 94KB - Virtual size: 93KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1d15b973cc32f6a56ede02a9f3077b14

Code Sign

04:54:8d:1a:bf:ed:6a:5c:8f:b2:08:bc:9c:a6:8d:32:fb:c8Certificate

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12Certificate

Extended Key Usages

Key Usages

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12Certificate

Extended Key Usages

Key Usages

9c:30:a2:e0:66:9c:37:6a:ca:44:96:af:d9:26:b0:3b:a0:1f:8f:58:1b:b2:a0:95:e1:8d:38:aa:88:65:ba:07Signer

Signature Validations

Verification

26/05/2022, 06:11 Valid: false

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

ole32

oleaut32

Sections

.text Size: 1.0MB - Virtual size: 1.0MB

.data Size: 5KB - Virtual size: 11KB

.rsrc Size: 94KB - Virtual size: 93KB

04:54:8d:1a:bf:ed:6a:5c:8f:b2:08:bc:9c:a6:8d:32:fb:c8
Certificate

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12
Certificate

9c:30:a2:e0:66:9c:37:6a:ca:44:96:af:d9:26:b0:3b:a0:1f:8f:58:1b:b2:a0:95:e1:8d:38:aa:88:65:ba:07
Signer

26/05/2022, 06:11
Valid: false

.text
Size: 1.0MB - Virtual size: 1.0MB

.data
Size: 5KB - Virtual size: 11KB

.rsrc
Size: 94KB - Virtual size: 93KB