Behavioral task
behavioral1
Sample
2025-02-01_a12432e75d88a5c1534d978f85524377_smoke-loader_wapomi.exe
Resource
win7-20240903-en
General
-
Target
2025-02-01_a12432e75d88a5c1534d978f85524377_smoke-loader_wapomi
-
Size
581KB
-
MD5
a12432e75d88a5c1534d978f85524377
-
SHA1
d9ca09da728b378d4ed14709fe0207e3ab9a21b0
-
SHA256
6405fff0f38e854fb479ee512c7f005a6edf7c798dfb27d033e97b23bf099db7
-
SHA512
0c17e3bcecee59259c59bbb024c200542c1d1bdae367cfbc3b8541e0a21d67d38e086591296a0cb80e2423a761ce012c0340b9ae2c887f563570abe8464b2eb6
-
SSDEEP
12288:FkCkUf7WV/HGlI9O+FPnPfFfqfyJasMRiABSm8ay4HL+0NQLfn/Cq3G/Pv5:eCkUaOMn0OlMMdcHsTn/Bu5
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2025-02-01_a12432e75d88a5c1534d978f85524377_smoke-loader_wapomi
Files
-
2025-02-01_a12432e75d88a5c1534d978f85524377_smoke-loader_wapomi.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 872KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 499KB - Virtual size: 500KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 64KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
@&���u� Size: 16KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE