Behavioral task
behavioral1
Sample
2024-12-26_83125ab9dfa745107a71601710d2fbfa_smoke-loader_wapomi.exe
Resource
win7-20240903-en
General
-
Target
2024-12-26_83125ab9dfa745107a71601710d2fbfa_smoke-loader_wapomi
-
Size
193KB
-
MD5
83125ab9dfa745107a71601710d2fbfa
-
SHA1
15e9191aa572f1478f6d4ba4bfbf78c323eb3a5e
-
SHA256
3720e64a9c7bfd4d158e16924336ae553beb78313657a45d5477142b0693c017
-
SHA512
dbf678d9a76f85b7fffa57baf21f94757889737ea8f073ee7407622d0d23d231345975e2bcd29730676c43cdc335a8d7e2b567731cb324fc448d08a6119bc989
-
SSDEEP
6144:F8ToK31I1qZQxU4ouUnnk4LNaj8co7Ns:FHKlYqZQxUiSnkO6I7
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-12-26_83125ab9dfa745107a71601710d2fbfa_smoke-loader_wapomi
Files
-
2024-12-26_83125ab9dfa745107a71601710d2fbfa_smoke-loader_wapomi.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 236KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 166KB - Virtual size: 168KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
|2u� Size: 16KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE