Behavioral task
behavioral1
Sample
2024-12-21_a46a710e3a985505d0a2762231327050_smoke-loader_wapomi.exe
Resource
win7-20240903-en
General
-
Target
2024-12-21_a46a710e3a985505d0a2762231327050_smoke-loader_wapomi
-
Size
60KB
-
MD5
a46a710e3a985505d0a2762231327050
-
SHA1
c2ce23a7a0a27ddbf63267bcc9dbbfaefa797095
-
SHA256
4fd115d465fb0dc9d42d0eca8174333abaa219d3b763e82c9c09f74ff4873251
-
SHA512
b3151dc6ea2ce313c29d3c3300483e78a604135733b3cd5b214dfe83bb9883c3d842f91d0c3e4df1b6cc4294f76bc8f6ecea373bd643aff1d1a486dd3d81bfb4
-
SSDEEP
1536:rGzyZAvhHTuvQsMtWCSFmFnbtAO3d8sGCq2iW7z:6zxpWM8B+btAO3rGCH
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-12-21_a46a710e3a985505d0a2762231327050_smoke-loader_wapomi
Files
-
2024-12-21_a46a710e3a985505d0a2762231327050_smoke-loader_wapomi.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 52KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 29KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 13KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
� Size: 16KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE