2025-02-17_4999eb1c95e1dc5148da873983f65532_smoke-loader_wapomi

Sharing

Copy URL

Twitter E-mail

General

Target

2025-02-17_4999eb1c95e1dc5148da873983f65532_smoke-loader_wapomi
Size

5.1MB
MD5

4999eb1c95e1dc5148da873983f65532
SHA1

a63ed0be542f8fe5d7052576aceee63b20274adf
SHA256

7fa9e421428a672f31a7eddcd2085607b5223d71c5ea05a1e3715099f781f7ce
SHA512

7c7b0f42b9920641aca5a3f5c4f93e29f200f204eca6f2e292cff306800bde3ea5dd61441c2892d7be4de5930bcc81ce05bb99dc2dc1ac9407e663aab8c06d65
SSDEEP

98304:tEJjByItNtx34RMUP7I5dHWSDa+5UPGEpJLfiVBAUZLEAvfzXpQh:eMvSUDIzHWSDa+5UPGEpJmVV5A

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2025-02-17_4999eb1c95e1dc5148da873983f65532_smoke-loader_wapomi

Files

2025-02-17_4999eb1c95e1dc5148da873983f65532_smoke-loader_wapomi
.exe windows:5 windows x86 arch:x86

35b270a08faa70bd04b1972a7a38eab8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

version

VerQueryValueA
GetFileVersionInfoA
GetFileVersionInfoSizeA

ws2_32

getsockname
bind
listen
WSAStartup
socket
ioctlsocket
connect
__WSAFDIsSet
getsockopt
recv
send
closesocket
WSASetLastError
ntohs
getservbyport
gethostbyaddr
htons
getservbyname
htonl
inet_ntoa
gethostbyname
WSAGetLastError
inet_addr
select

comctl32

ImageList_Destroy
ord17
ImageList_Create
PropertySheetA
ImageList_ReplaceIcon

kernel32

VirtualAlloc
GetCPInfo
GetOEMCP
IsValidCodePage
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetFullPathNameW
GetModuleFileNameA
ReadFile
CreateProcessA
CreatePipe
GetLastError
GetDriveTypeA
Sleep
MultiByteToWideChar
GetDiskFreeSpaceExA
GetShortPathNameA
GetLongPathNameA
RemoveDirectoryW
DeleteFileW
GetFileAttributesW
CloseHandle
GetFileSize
CreateFileA
CreateFileW
MoveFileA
CopyFileExA
GetFileAttributesA
GetCurrentDirectoryA
GetEnvironmentVariableA
GetModuleHandleA
SetLastError
GetVersionExA
GetThreadLocale
GetProcAddress
LoadLibraryA
GetLogicalDriveStringsA
FindClose
FindNextFileA
FindFirstFileA
GetTickCount
GlobalFree
GlobalAlloc
FreeLibrary
LCMapStringA
WaitForSingleObject
CreateMutexA
GetCurrentProcessId
GetSystemDirectoryA
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
InterlockedCompareExchange
GetCurrentThreadId
TlsAlloc
InterlockedIncrement
TlsSetValue
DuplicateHandle
GetCurrentThread
GetCurrentProcess
TlsGetValue
GetACP
FlushFileBuffers
GetConsoleMode
GetConsoleCP
GetStartupInfoA
GetFileType
SetHandleCount
WideCharToMultiByte
InitializeCriticalSectionAndSpinCount
HeapSize
GetStdHandle
WriteFile
InterlockedDecrement
TlsFree
GetDateFormatA
GetTimeFormatA
GetTimeZoneInformation
CreateThread
ResumeThread
ExitThread
HeapReAlloc
SetFilePointer
FindFirstFileW
GetDriveTypeW
FileTimeToLocalFileTime
FileTimeToSystemTime
CreateDirectoryW
GetCommandLineA
HeapAlloc
RaiseException
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
HeapFree
ExitProcess
GetModuleHandleW
RtlUnwind
GetSystemTimeAsFileTime
HeapCreate
VirtualFree
LCMapStringW
SetStdHandle
GetFullPathNameA
GetLocaleInfoA
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
GetStringTypeA
GetStringTypeW
CompareStringA
CompareStringW
SetEnvironmentVariableA
SetEndOfFile
ReleaseMutex
GetProcessHeap

user32

GetDC
ReleaseDC
GetSystemMetrics
CreateWindowExA
wsprintfA
SetWindowPos
GetActiveWindow
GetWindowThreadProcessId
AttachThreadInput
EnumWindows
GetClassNameA
MessageBoxA
CreateDialogParamA
IsDialogMessageA
PeekMessageA
TranslateMessage
DispatchMessageA
DestroyWindow
SetWindowLongA
GetWindowLongA
SetDlgItemTextA
InvalidateRect
ShowWindow
PostMessageA
ClientToScreen
PtInRect
LoadIconA
GetDlgCtrlID
LoadStringA
GetParent
SetForegroundWindow
EnableWindow
SendMessageA
GetWindowTextA
EndDialog
SetWindowTextA
GetDlgItem
GetWindowRect
ScreenToClient
MoveWindow
BringWindowToTop

gdi32

CreateFontIndirectA
GetDeviceCaps
GetObjectA

comdlg32

GetOpenFileNameW

advapi32

ReportEventA
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
RegisterEventSourceA

shell32

SHGetFolderPathA
SHBrowseForFolderA
SHGetPathFromIDListA
ShellExecuteA

ole32

CoCreateGuid
OleInitialize

Sections

.text
Size: 2.9MB - Virtual size: 2.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 336KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 501KB - Virtual size: 580KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

^L��u�
Size: 16KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

35b270a08faa70bd04b1972a7a38eab8

Headers

DLL Characteristics

File Characteristics

Imports

version

ws2_32

comctl32

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

Sections

.text Size: 2.9MB - Virtual size: 2.9MB

.rdata Size: 1.6MB - Virtual size: 1.6MB

.data Size: 105KB - Virtual size: 336KB

.rsrc Size: 501KB - Virtual size: 580KB

^L���u� Size: 16KB - Virtual size: 20KB

.text
Size: 2.9MB - Virtual size: 2.9MB

.rdata
Size: 1.6MB - Virtual size: 1.6MB

.data
Size: 105KB - Virtual size: 336KB

.rsrc
Size: 501KB - Virtual size: 580KB

^L��u�
Size: 16KB - Virtual size: 20KB