Behavioral task
behavioral1
Sample
2024-12-26_98b92e80d22df6afb51e81fc02d93afa_smoke-loader_wapomi.exe
Resource
win7-20240903-en
General
-
Target
2024-12-26_98b92e80d22df6afb51e81fc02d93afa_smoke-loader_wapomi
-
Size
236KB
-
MD5
98b92e80d22df6afb51e81fc02d93afa
-
SHA1
2720abb25681ca3b6a4c4e8d24d7dcf6521afaab
-
SHA256
7b174775912ee7f91b4c50d508056d33e60f09d1f4418c72f4b6f046e511b2a6
-
SHA512
046d100e8470d9f463cb36da0899433cd5e472869c2871465ab4cfe1b8064eea9f10e1130b5c6867b7f0d2d41f5f1f1cda0712357248f6c6a03db5a39701519e
-
SSDEEP
6144:4cCDbGfc8sg2LcBD1o9pDjNaazqpDbqjuNlPwJ32I/:WbGU8sg2oN1SWl2juAJmI
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-12-26_98b92e80d22df6afb51e81fc02d93afa_smoke-loader_wapomi
Files
-
2024-12-26_98b92e80d22df6afb51e81fc02d93afa_smoke-loader_wapomi.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 184KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 209KB - Virtual size: 212KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�V�٣u" Size: 16KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE