Static task
static1
Behavioral task
behavioral1
Sample
2024-12-11_ab7b33cebe7a718b7db65059477f761c_smoke-loader_wapomi.exe
Resource
win7-20240903-en
General
-
Target
2024-12-11_ab7b33cebe7a718b7db65059477f761c_smoke-loader_wapomi
-
Size
8.1MB
-
MD5
ab7b33cebe7a718b7db65059477f761c
-
SHA1
01f5cb01238f5de015834e875fc4eb1a97973185
-
SHA256
a5979e9e69be7b4e3837b561c1a792c7b0d09678d20dbd4b184db37eda27fc9d
-
SHA512
b5111bd2ba7e560af51bb5dec56276512191dae0814e0726c46bd394bd0b81f612fbd1d7524eb8ba2284b797d75d7f1b1a6615515d9e9e170e1f7aa8f05ea6f1
-
SSDEEP
196608:6TOcv7TBNKEsYaRccf/mster2BCoUFWt2X9CkbH5zq3HIR:6qC7Fo3Y+vmQei3KWt2X9hbZzbR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-12-11_ab7b33cebe7a718b7db65059477f761c_smoke-loader_wapomi
Files
-
2024-12-11_ab7b33cebe7a718b7db65059477f761c_smoke-loader_wapomi.exe windows:4 windows x86 arch:x86
016ea4aa268550ac40dc1d9e83323750
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FindNextFileW
DeleteFileW
GetTickCount
GetLongPathNameW
GetTempPathW
GetCommandLineW
WaitForSingleObject
RemoveDirectoryW
GetFileAttributesW
LoadLibraryExW
GetSystemDirectoryW
SetErrorMode
CreateFileA
ReadFile
SetFilePointer
GetLastError
FormatMessageW
ExitProcess
CreateFileW
CloseHandle
LocalFree
CreateProcessW
GetSystemTime
WriteFile
GetModuleFileNameW
GetVersionExW
CopyFileW
GetVersion
GetProcAddress
FreeLibrary
InterlockedExchange
LoadLibraryA
RaiseException
VirtualAlloc
VirtualFree
FileTimeToSystemTime
FileTimeToLocalFileTime
GetFullPathNameW
GetLocalTime
GetWindowsDirectoryW
GetCurrentDirectoryW
GetEnvironmentVariableW
GetModuleHandleA
GlobalMemoryStatus
WideCharToMultiByte
GetDriveTypeW
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
GetStartupInfoW
RtlUnwind
GetFileType
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
SetHandleCount
GetStartupInfoA
DeleteCriticalSection
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
HeapDestroy
HeapCreate
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
SetStdHandle
EnterCriticalSection
LeaveCriticalSection
Sleep
GetConsoleCP
GetConsoleMode
SetEndOfFile
GetCPInfo
GetACP
GetOEMCP
HeapSize
HeapReAlloc
LCMapStringA
LCMapStringW
InitializeCriticalSection
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
FlushFileBuffers
GlobalAlloc
GlobalLock
GlobalHandle
GlobalUnlock
GlobalFree
CreateDirectoryW
GetVolumeInformationW
LocalAlloc
DosDateTimeToFileTime
LocalFileTimeToFileTime
SetFileTime
SetCurrentDirectoryW
FindFirstFileW
MultiByteToWideChar
FindClose
gdi32
SetTextColor
SetTextAlign
GetBkColor
GetTextExtentPoint32W
ExtTextOutW
CreateDCW
GetDeviceCaps
CreateFontIndirectW
DeleteDC
SelectObject
DeleteObject
SetBkColor
advapi32
RegQueryValueW
Sections
.text Size: 156KB - Virtual size: 152KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 32KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 65KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 40KB - Virtual size: 39KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
_winzip_ Size: 7.9MB - Virtual size: 7.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
;1j��u Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE