Behavioral task
behavioral1
Sample
2024-12-26_372bccab8bba9047aaec867b16674bdb_smoke-loader_wapomi.exe
Resource
win7-20240708-en
General
-
Target
2024-12-26_372bccab8bba9047aaec867b16674bdb_smoke-loader_wapomi
-
Size
95KB
-
MD5
372bccab8bba9047aaec867b16674bdb
-
SHA1
598ea7b7409791acb7e656c82bcd5a3df30ebd14
-
SHA256
d9751ebde56bac457c8f3136062497eae7e5cb9493368a353d9540adb63dea71
-
SHA512
bb5f7bf4bdfe2bac3658e295a035611194365c5b89e69defce724e87707d997d618139bb1d992d5eb160b11f7e2ef256d41f84a0fa21ad427b3bc82eca69588f
-
SSDEEP
1536:jmHsKgDuEaIY0TnYZXqp1jblhRMnnHqPP9kWKLVjhGTSR+GCq2iW7z:jmHsKgDDJbTnYZ+lhRKHqPfghMS0GCH
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-12-26_372bccab8bba9047aaec867b16674bdb_smoke-loader_wapomi
Files
-
2024-12-26_372bccab8bba9047aaec867b16674bdb_smoke-loader_wapomi.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 112KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 72KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
��EG�u� Size: 16KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE