Behavioral task
behavioral1
Sample
2025-02-02_99057baf624c7547ae3176cd0b61a736_smoke-loader_wapomi.exe
Resource
win7-20240708-en
General
-
Target
2025-02-02_99057baf624c7547ae3176cd0b61a736_smoke-loader_wapomi
-
Size
60KB
-
MD5
99057baf624c7547ae3176cd0b61a736
-
SHA1
3c5dc36b7b8b8504927270ee5a4ef05ed323c887
-
SHA256
6468f753d87d7b396bcd0f9fcc1615b0dc72c02f16fac4d6fb96d01677956f88
-
SHA512
659ddf63feff5e9bb3575f6b3e5beeee02ab820cf7087d1bf3b0337dc70b3fd9066b2b0cdbf1ba1a1fa2cf941b1789c4090f3a53d5eee965e5352e7eb722b2dd
-
SSDEEP
1536:N1cLoeEGIfdTpu8ttB9vsIBwWZHJzMGCq2iW7z:LeEtpxR9kW5JoGCH
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2025-02-02_99057baf624c7547ae3176cd0b61a736_smoke-loader_wapomi
Files
-
2025-02-02_99057baf624c7547ae3176cd0b61a736_smoke-loader_wapomi.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 60KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 37KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
<݀>�u� Size: 16KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE