Behavioral task
behavioral1
Sample
2024-12-22_6970b4657293e4980e51dc756dd1bad3_smoke-loader_wapomi.exe
Resource
win7-20240903-en
General
-
Target
2024-12-22_6970b4657293e4980e51dc756dd1bad3_smoke-loader_wapomi
-
Size
54KB
-
MD5
6970b4657293e4980e51dc756dd1bad3
-
SHA1
42cf3bad1f8079c0ceabe7addc45e031ae129f39
-
SHA256
acd1aa0d197f7eef419d12b309b3a5cdfc094bf300c2f7fc84523ea7e49219c1
-
SHA512
4c739e30f4d12896dde1ff4f23d70dfd5120b0e77e4a59adce1b36540b0a86065315a383dd76ac7680bf0a17019a3518df70cafc17a8b2edb2b8d1d0f9259390
-
SSDEEP
768:1ubLj/ur3kdABSJpYkI1+RjBHUZWG4F9UIV2SyYAxIQGPL4vzZq2o9W7GsxBbPr:1AekdABcfjBHCje9UBS5AxDGCq2iW7z
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-12-22_6970b4657293e4980e51dc756dd1bad3_smoke-loader_wapomi
Files
-
2024-12-22_6970b4657293e4980e51dc756dd1bad3_smoke-loader_wapomi.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 31KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
'$�i�u- Size: 16KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE