2025-03-21_18c4dd391ba18f2fb8337b1d74e09319_amadey_rhadamanthys_smoke-loader_wapomi

Sharing

Copy URL

Twitter E-mail

General

Target

2025-03-21_18c4dd391ba18f2fb8337b1d74e09319_amadey_rhadamanthys_smoke-loader_wapomi
Size

60KB
MD5

18c4dd391ba18f2fb8337b1d74e09319
SHA1

3a423a2e9b75f1275538be1a4b6337f559717ab0
SHA256

e52b7654a6b42b427fb03d5c7e11dec2dc9f7dbb4dc539300d3daa8588558693
SHA512

7725aee2d08d689406398d37f72ad25470e284aafabb8fb47f507913121b0ac591fe27d54bd88514e8f44c41fa84d31279dd742626a227a6fe4568cbc96e5e20
SSDEEP

1536:ycexOin/dKZl9nEEPhkD8kJHjGCq2iW7z:UnklqEk8kJDGCH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2025-03-21_18c4dd391ba18f2fb8337b1d74e09319_amadey_rhadamanthys_smoke-loader_wapomi

Files

2025-03-21_18c4dd391ba18f2fb8337b1d74e09319_amadey_rhadamanthys_smoke-loader_wapomi
.exe windows:5 windows x86 arch:x86

b8cb8e89b8e585e6ad50d9a5993a8b5c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FreeLibrary
GetCurrentProcess
GetProcAddress
LoadLibraryA
GetSystemDirectoryA
WaitForSingleObject
GetModuleFileNameA
GetCommandLineA
HeapSetInformation
GetStartupInfoW
GetLastError
HeapFree
DecodePointer
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
EncodePointer
TerminateProcess
IsProcessorFeaturePresent
GetModuleHandleW
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameW
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
HeapCreate
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
HeapAlloc
RtlUnwind
SetFilePointer
GetConsoleCP
GetConsoleMode
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
Sleep
LoadLibraryW
SetStdHandle
WriteConsoleW
MultiByteToWideChar
LCMapStringW
GetStringTypeW
HeapReAlloc
HeapSize
CreateFileW
CloseHandle
FlushFileBuffers

shell32

ShellExecuteExA

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 448B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

EG,j�u�
Size: 16KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

b8cb8e89b8e585e6ad50d9a5993a8b5c

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

shell32

Sections

.text Size: 28KB - Virtual size: 27KB

.rdata Size: 11KB - Virtual size: 10KB

.data Size: 3KB - Virtual size: 11KB

.rsrc Size: 512B - Virtual size: 448B

EG,j�u� Size: 16KB - Virtual size: 20KB

.text
Size: 28KB - Virtual size: 27KB

.rdata
Size: 11KB - Virtual size: 10KB

.data
Size: 3KB - Virtual size: 11KB

.rsrc
Size: 512B - Virtual size: 448B

EG,j�u�
Size: 16KB - Virtual size: 20KB