Static task
static1
Behavioral task
behavioral1
Sample
2025-02-02_ea49f823897569944b1c5e9f5f0056a3_smoke-loader_wapomi.exe
Resource
win7-20240903-en
General
-
Target
2025-02-02_ea49f823897569944b1c5e9f5f0056a3_smoke-loader_wapomi
-
Size
150KB
-
MD5
ea49f823897569944b1c5e9f5f0056a3
-
SHA1
c913bfee0c1eae82523eba83d61577880ba7433f
-
SHA256
eb1d3b398bfc4a71e72c1029741a1d389a719b2350c1c99631eccf70dde90b2d
-
SHA512
ad995390bb4141e8026a7eed0e46b1a587f3cd296448911b68b5b6120e18adf55ec3e8c38c3cbfa2f64dace4a432191c533d539ce9401b698835377b659262a3
-
SSDEEP
3072:uX/tjPCjRn4ne+/GBEmH1N0Bu0qIoILDZsdfBW8XGYRGCH:upCdOnu7gBAo82t
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2025-02-02_ea49f823897569944b1c5e9f5f0056a3_smoke-loader_wapomi
Files
-
2025-02-02_ea49f823897569944b1c5e9f5f0056a3_smoke-loader_wapomi.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
syd Size: - Virtual size: 176KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 130KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�� I�u� Size: 16KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE