2025-03-30_1af7c14f03c0f97e84866762d3975796_amadey_smoke-loader

Sharing

Copy URL

Twitter E-mail

General

Target

2025-03-30_1af7c14f03c0f97e84866762d3975796_amadey_smoke-loader
Size

10.6MB
MD5

1af7c14f03c0f97e84866762d3975796
SHA1

7049d730600dc4e28a8859e835d701e365d0e83a
SHA256

35bc3d4b58223b892a1e97468a1a201d70313fb8eb0493fd8dc84d4676220b57
SHA512

07f3300958da25fbb02d2e51887fc0cf9b8b578d24cd4de1b6d524b2ad3380d91728dd16d618a2c19992753b2df795e77caf4b2fb59d3e9336ab33a053992324
SSDEEP

6144:T7aBkOsUh6TFWAbjG+jTD7fksRUrz8KFxVsGEp:a3sUhfAvGETD7f2XhFDstp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2025-03-30_1af7c14f03c0f97e84866762d3975796_amadey_smoke-loader

Files

2025-03-30_1af7c14f03c0f97e84866762d3975796_amadey_smoke-loader
.exe windows:5 windows x86 arch:x86

54002ff066126f482bc15387e5361b2b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindFirstChangeNotificationW
lstrlenA
GlobalLock
SetEvent
GetTickCount
ActivateActCtx
GlobalAlloc
SetCommConfig
CreateEventA
GetStringTypeExW
IsBadWritePtr
CreateActCtxA
lstrcatA
GetLastError
GetProcAddress
EnumDateFormatsExA
LoadLibraryA
GetOEMCP
CloseHandle
GetCommandLineW
HeapSetInformation
GetStartupInfoW
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
EnterCriticalSection
LeaveCriticalSection
SetHandleCount
GetStdHandle
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
DecodePointer
EncodePointer
GetModuleFileNameW
IsProcessorFeaturePresent
HeapValidate
IsBadReadPtr
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
InterlockedIncrement
InterlockedDecrement
GetModuleHandleW
ExitProcess
FreeEnvironmentStringsW
GetEnvironmentStringsW
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
SetLastError
HeapCreate
WriteFile
MultiByteToWideChar
ReadFile
OutputDebugStringA
WriteConsoleW
OutputDebugStringW
LoadLibraryW
RtlUnwind
WideCharToMultiByte
GetACP
GetCPInfo
IsValidCodePage
HeapAlloc
GetModuleFileNameA
HeapReAlloc
HeapSize
HeapQueryInformation
HeapFree
FlushFileBuffers
GetConsoleCP
GetConsoleMode
SetStdHandle
SetFilePointer
GetStringTypeW
LCMapStringW
RaiseException
CreateFileW

Exports

Exports

@dpifgbodvg@8

Sections

.text
Size: 230KB - Virtual size: 229KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 13KB - Virtual size: 82KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 10.3MB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

54002ff066126f482bc15387e5361b2b

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

Exports

Exports

Sections

.text Size: 230KB - Virtual size: 229KB

.data Size: 13KB - Virtual size: 82KB

.rsrc Size: 33KB - Virtual size: 32KB

.reloc Size: 10.3MB - Virtual size: 12KB

.text
Size: 230KB - Virtual size: 229KB

.data
Size: 13KB - Virtual size: 82KB

.rsrc
Size: 33KB - Virtual size: 32KB

.reloc
Size: 10.3MB - Virtual size: 12KB