Behavioral task
behavioral1
Sample
2024-11-24_1fe1ac796c2b6ebff578f5df54cdf505_smoke-loader_wapomi.exe
Resource
win7-20241023-en
General
-
Target
2024-11-24_1fe1ac796c2b6ebff578f5df54cdf505_smoke-loader_wapomi
-
Size
2.9MB
-
MD5
1fe1ac796c2b6ebff578f5df54cdf505
-
SHA1
bfdced5a78b3da55a9b40750177cf980244172f3
-
SHA256
7f0156d1c1fb8ab8285b771ff2be70f9efedc6beb12f2f061026e36538237287
-
SHA512
5353a07cbdf5233cbf8ddf7257425f718cabbb76605b05ed4cf371d560552e04fbc4764f278c639c8991048ec986b0b7643adb3e4c93851c854783856c745b69
-
SSDEEP
49152:YrPT2Gn+45fu74LQ7A8Y+kKuxIhMF2dRvwKfrPwzuedUzxS3:KPT2a+45fjLQ9YhKuxI+kdGKTPY7dR
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-11-24_1fe1ac796c2b6ebff578f5df54cdf505_smoke-loader_wapomi
Files
-
2024-11-24_1fe1ac796c2b6ebff578f5df54cdf505_smoke-loader_wapomi.exe windows:6 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 2.4MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.8MB - Virtual size: 2.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 36KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Xct��uf Size: 16KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE