Behavioral task
behavioral1
Sample
2024-12-21_2cd5eba06940fe889ac1be1322abc379_smoke-loader_wapomi.exe
Resource
win7-20241010-en
General
-
Target
2024-12-21_2cd5eba06940fe889ac1be1322abc379_smoke-loader_wapomi
-
Size
90KB
-
MD5
2cd5eba06940fe889ac1be1322abc379
-
SHA1
addfaf5e64584b0ec8ecb5e4a66acf9ce2d9a133
-
SHA256
1c2f171de1ca7635db99358aa9939ebe6e96b151fd10f4559d3c30807ba69600
-
SHA512
f8b5302c82f90c730d823522742ee625fd082c7bca38b4391e16eb49d5cc0eb23661b75b84cad3fe8128077979d25e970c028ebe4c8002078e5d8d00962885e3
-
SSDEEP
1536:zNcAKhXKk76oKSQkMWF4EXO+tAoqh/qmTdp0BmUmwGratQoQrI40GCq2iW7z:Jc7hakGQb1FT+pzh/qmTf0MwG2QrINGE
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-12-21_2cd5eba06940fe889ac1be1322abc379_smoke-loader_wapomi
Files
-
2024-12-21_2cd5eba06940fe889ac1be1322abc379_smoke-loader_wapomi.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 96KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 69KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
���)�u@ Size: 16KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE