Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Behavioral task
behavioral1
Sample
2025-03-21_b11e44d25b66635ce1652c10f2507983_floxif_smoke-loader.exe
Resource
win7-20240729-en
General
-
Target
2025-03-21_b11e44d25b66635ce1652c10f2507983_floxif_smoke-loader
-
Size
135KB
-
MD5
b11e44d25b66635ce1652c10f2507983
-
SHA1
2018d2b921b2e9caebe49b7542ea568ff4a94f2a
-
SHA256
167c4538f23a498e6521aed45d4135c75dd33c92e04df20ce54d6f99c489f03c
-
SHA512
dd98fb6d5514a7266caa69a4b900f29fd0682c909384b53a5d68ca19e22a9852ee9dd63707cc9832a776e9bace3749952ca3d13182a0b6814ffa39d6bc7141b1
-
SSDEEP
3072:w7qXriW5/KNbwJFNvgDUGOh2lQBV+UdE+rECWp7hKvEPya:w+rvRK79O1BV+UdvrEFp7hKsPya
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2025-03-21_b11e44d25b66635ce1652c10f2507983_floxif_smoke-loader
Files
-
2025-03-21_b11e44d25b66635ce1652c10f2507983_floxif_smoke-loader.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 60KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 39KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.�"��u� Size: 16KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE