@dfkvodv@0
@mctraxer@0
Static task
static1
Behavioral task
behavioral1
Sample
2025-03-30_1c164e228395b76537d9c5f3cb6d1e17_amadey_rhadamanthys_smoke-loader.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2025-03-30_1c164e228395b76537d9c5f3cb6d1e17_amadey_rhadamanthys_smoke-loader.exe
Resource
win10v2004-20250314-en
Target
2025-03-30_1c164e228395b76537d9c5f3cb6d1e17_amadey_rhadamanthys_smoke-loader
Size
13.8MB
MD5
1c164e228395b76537d9c5f3cb6d1e17
SHA1
5a3d0f03dd794f846cb8935d3fef26211b568be6
SHA256
f05feea6a054d056065071fa7082af87dc344af42a02c8f08edac5af6df11d21
SHA512
8375c040b4ce4f2a9b8615f35e6abebe5463be78268ab6564928b546412c09fe28a18bbdfade8c401e8510c70035a8e268f04b6e8b7ea3f469663da0d1bd3406
SSDEEP
6144:W8yAzuf/YYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYK:Drzufv
Checks for missing Authenticode signature.
resource |
---|
2025-03-30_1c164e228395b76537d9c5f3cb6d1e17_amadey_rhadamanthys_smoke-loader |
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
HeapAlloc
SetConsoleTextAttribute
ConnectNamedPipe
GetPrivateProfileStringA
GetCommTimeouts
EnumDateFormatsExW
ClearCommError
GetSystemWindowsDirectoryA
LocalAlloc
GetProcAddress
LoadLibraryA
SetupComm
lstrcpyA
GetThreadSelectorEntry
GetDefaultCommConfigW
GetEnvironmentVariableW
BuildCommDCBAndTimeoutsA
GetAtomNameW
ProcessIdToSessionId
FindNextVolumeW
GetLastError
lstrlenW
lstrlenA
GetVolumeNameForVolumeMountPointA
MapViewOfFile
LoadResource
ReadConsoleA
CompareStringW
GetCommandLineA
GetStartupInfoA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
SetFilePointer
EnterCriticalSection
LeaveCriticalSection
GetModuleHandleW
Sleep
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
HeapCreate
VirtualFree
HeapFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
SetStdHandle
GetConsoleCP
GetConsoleMode
FlushFileBuffers
RtlUnwind
InitializeCriticalSectionAndSpinCount
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
VirtualAlloc
HeapReAlloc
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
MultiByteToWideChar
HeapSize
GetLocaleInfoA
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
CreateFileA
CloseHandle
EqualSid
RegisterEventSourceW
IsValidAcl
DeregisterEventSource
WinHttpCloseHandle
@dfkvodv@0
@mctraxer@0
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ