Fury
Probka
Static task
static1
Behavioral task
behavioral1
Sample
2025-04-04_fdfed1c304302f40c823d279799dcb3d_amadey_rhadamanthys_smoke-loader.exe
Resource
win10v2004-20250314-en
Target
2025-04-04_fdfed1c304302f40c823d279799dcb3d_amadey_rhadamanthys_smoke-loader
Size
11.9MB
MD5
fdfed1c304302f40c823d279799dcb3d
SHA1
d6a811a72f0083d4cb011cea144718f2cf3b84ad
SHA256
c910c55ca86cbedb0b13a39504b0810886fe3223ce9e668045ee48d12e137b4d
SHA512
a21f10523e3e0f51e6a43e5b6b35754ce2f4f2bfa740a42a75e216ea5c0e8d1aed7c20dbb7ef354c6721314d27b884455ce1895b65aaf86b957ff9dc2da17664
SSDEEP
3072:GUYC9q24pkJimkGgbdGz9uIYogXFYfKkqCZB8h0e2R10JKuC5PsFRRRRRRRRRRRU:GUYgq6krsz9Ti1h0eSuJ4s4
Checks for missing Authenticode signature.
resource |
---|
2025-04-04_fdfed1c304302f40c823d279799dcb3d_amadey_rhadamanthys_smoke-loader |
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
InterlockedIncrement
GetCurrentProcess
GetModuleHandleExW
CancelWaitableTimer
GetModuleHandleW
SetFileTime
TzSpecificLocalTimeToSystemTime
GlobalAlloc
GlobalFindAtomA
GetLocaleInfoW
GetSystemTimeAdjustment
GetFileAttributesA
GetConsoleAliasW
TerminateProcess
FileTimeToSystemTime
GetCompressedFileSizeA
GetTimeZoneInformation
GlobalUnlock
LoadResource
GetConsoleOutputCP
GetLastError
GetProcAddress
SetFileAttributesA
GetAtomNameA
OpenWaitableTimerW
AddVectoredExceptionHandler
AddAtomW
SetConsoleWindowInfo
GetTapeParameters
SetConsoleCursorInfo
GlobalUnWire
lstrcatW
VirtualProtect
LocalFree
lstrcpyW
CompareStringW
CompareStringA
FindResourceW
FindResourceExW
DisconnectNamedPipe
WriteConsoleOutputCharacterW
GetCommandLineA
GetStartupInfoA
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapAlloc
EnterCriticalSection
LeaveCriticalSection
Sleep
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
InterlockedDecrement
GetCurrentThread
HeapCreate
HeapDestroy
VirtualFree
HeapFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
SetFilePointer
GetConsoleCP
GetConsoleMode
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
FatalAppExitA
VirtualAlloc
HeapReAlloc
RtlUnwind
MultiByteToWideChar
RaiseException
SetConsoleCtrlHandler
FreeLibrary
InterlockedExchange
LoadLibraryA
InitializeCriticalSectionAndSpinCount
SetStdHandle
WriteConsoleA
WriteConsoleW
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetTimeFormatA
GetDateFormatA
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
FlushFileBuffers
ReadFile
GetModuleHandleA
HeapSize
CreateFileA
CloseHandle
SetEnvironmentVariableA
GetMonitorInfoA
ObjectPrivilegeAuditAlarmA
EnumDependentServicesW
RegReplaceKeyW
Fury
Probka
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ