C:\mosexukedof.pdb
Static task
static1
Behavioral task
behavioral1
Sample
2025-04-04_9ff23ff2ac3ab0e8c68016bf8442d06e_amadey_rhadamanthys_smoke-loader.exe
Resource
win10v2004-20250314-en
General
-
Target
2025-04-04_9ff23ff2ac3ab0e8c68016bf8442d06e_amadey_rhadamanthys_smoke-loader
-
Size
12.5MB
-
MD5
9ff23ff2ac3ab0e8c68016bf8442d06e
-
SHA1
bdc37abc387c38e8621afd6237ccbf94152bc0a7
-
SHA256
79a111853adaf1352195d5271abe81021bece7d1d2f71a212f856100dccb827a
-
SHA512
dc5505c990e58c7b31845584674d868793d9585f713488e90e73677257d21a6202ee896808943b097a60505b2b143ea23499f11c6e080ea5c36648d3ddbec35d
-
SSDEEP
24576:LXcCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCV:w
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2025-04-04_9ff23ff2ac3ab0e8c68016bf8442d06e_amadey_rhadamanthys_smoke-loader
Files
-
2025-04-04_9ff23ff2ac3ab0e8c68016bf8442d06e_amadey_rhadamanthys_smoke-loader.exe windows:5 windows x86 arch:x86
7920e218e7298681d6ab8958cdfc5079
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
SetTapeParameters
FindNextVolumeMountPointA
LoadLibraryW
lstrlenW
IsBadStringPtrA
SetConsoleTitleA
GetTempPathW
GetLastError
GetProcAddress
GetTapeStatus
GetSystemDefaultLCID
ReadFileEx
GlobalFree
WritePrivateProfileStringA
CreateHardLinkW
GetCommMask
DebugBreakProcess
GetProcessAffinityMask
BuildCommDCBA
GetCurrentProcessId
GlobalAddAtomW
UnregisterWaitEx
OpenFileMappingA
SetComputerNameW
GlobalLock
GetProcessIoCounters
EncodePointer
DecodePointer
GetCommandLineA
HeapSetInformation
GetStartupInfoW
RaiseException
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapAlloc
HeapFree
IsProcessorFeaturePresent
Sleep
HeapSize
GetModuleHandleW
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameW
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
HeapCreate
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
SetFilePointer
GetConsoleCP
GetConsoleMode
EnterCriticalSection
LeaveCriticalSection
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapReAlloc
RtlUnwind
SetStdHandle
WriteConsoleW
MultiByteToWideChar
LCMapStringW
GetStringTypeW
CreateFileW
CloseHandle
FlushFileBuffers
Sections
.text Size: 67KB - Virtual size: 66KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 65KB - Virtual size: 65KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 22.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12.3MB - Virtual size: 78KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ