Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Behavioral task
behavioral1
Sample
2025-03-23_d30f699a0d5a4ad55a9c8b6a978fad48_smoke-loader_wapomi.exe
Resource
win7-20241023-en
General
-
Target
2025-03-23_d30f699a0d5a4ad55a9c8b6a978fad48_smoke-loader_wapomi
-
Size
42KB
-
MD5
d30f699a0d5a4ad55a9c8b6a978fad48
-
SHA1
c341c75c0537381d28005250d4a811b1cc69bc76
-
SHA256
be1cf2b98c7413a7321e5d261a4e411088f39052418bb7a59b6fd3b5b36a354f
-
SHA512
4e2f1807abb993dcce3a910a0fdb7d6d655260ae24be3c782135fd71f514916fb9c686687d4b0db6393a25af767ac01372419df9513645463b1221e0725f0773
-
SSDEEP
768:7ofFhw9NkRKFqIA4Q0ndmMI15glZBfnHQGPL4vzZq2o9W7GsxBbPr:waKK3mM45ghfwGCq2iW7z
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2025-03-23_d30f699a0d5a4ad55a9c8b6a978fad48_smoke-loader_wapomi
Files
-
2025-03-23_d30f699a0d5a4ad55a9c8b6a978fad48_smoke-loader_wapomi.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 23KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�Z��u� Size: 16KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE