7Smoker Pro 2.0.rar
- SHA256 6b3ca7c198a8f1a37ae6d1f9925e280ffb57d0b3780abd46e3b63aa9cb32ab6b
Behavioral task
behavioral1
Sample
7Smoker Pro 2.0/7Smoker Pro 2.0.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
14 signatures
60 seconds
Behavioral task
behavioral2
Sample
7Smoker Pro 2.0/WinTypes/.gitattributes.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
4 signatures
60 seconds
Behavioral task
behavioral3
Sample
7Smoker Pro 2.0/WinTypes/Ionic.Zip.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
60 seconds
Behavioral task
behavioral4
Sample
7Smoker Pro 2.0/WinTypes/Launcher.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
13 signatures
60 seconds
Behavioral task
behavioral5
Sample
7Smoker Pro 2.0/platform.js
Resource
win10v2004-20260513-en
windows10-2004-x64
1 signatures
60 seconds
General
- Target 7Smoker Pro 2.0.rar
- Size 2.0MB
- Sample260812-s9xtqszfrd
- SHA256 6b3ca7c198a8f1a37ae6d1f9925e280ffb57d0b3780abd46e3b63aa9cb32ab6b
- MD5 03b5e036c71ed5be0d0deec9a5119341
- SHA1 0103ecdc26ad671cc133c3956429293e982ddf70
- SHA512 870d140c1b931358b586d66c9333f541756614ad61caacccaa5e577022f1b79bd3b78a5939992568699f86cde77da3793d7fa393a51b368afa92df1d06c76379
- SSDEEP 49152:PuY+19R5kMGPZlMiyin4t0xSS3vMncB0h+utGNLc:PuY+1f3nBgv3vrBQD
- TLSH T1F8A533F152A31CE60C4EB7E1AD102E5BC709060C5DD24EAEFB94A4F769DFE02639C199
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
Malware Config
Signatures
- SmartAssembly .NET packer 1 IoCs
Detects SmartAssembly .NET packer.
resource yara_rule static1/unpack001/7Smoker Pro 2.0/WinTypes/Launcher.exe SmartAssembly - Unsigned PE 4 IoCs
Checks for missing Authenticode signature.
resource unpack001/7Smoker Pro 2.0/7Smoker Pro 2.0.exe unpack001/7Smoker Pro 2.0/WinTypes/.gitattributes.exe unpack001/7Smoker Pro 2.0/WinTypes/Ionic.Zip.dll unpack001/7Smoker Pro 2.0/WinTypes/Launcher.exe - Inno Setup is an open-source installation builder for Windows applications. 1 IoCs
Inno Setup installer
resource yara_rule static1/unpack001/7Smoker Pro 2.0/WinTypes/.gitattributes.exe innosetup
File Explorer
-
7Smoker Pro 2.0.rar.rar 2.0MB
-
7Smoker Pro 2.0/7Smoker Pro 2.0.exe.exe 146KB
-
7Smoker Pro 2.0/WinTypes/.gitattributes.exe.exe 1.6MB
-
7Smoker Pro 2.0/WinTypes/Ionic.Zip.dll.dll 480KB
-
7Smoker Pro 2.0/WinTypes/LICENCE.dat.zip 77KB
-
7Smoker Pro 2.0/WinTypes/Launcher.exe.exe 53KB
-
7Smoker Pro 2.0/mathml.css14KB
-
7Smoker Pro 2.0/platform.js87B
7Smoker Pro 2.0/7Smoker Pro 2.0.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 365e49cc31e284e7e33088ea81f6995495f001ad497088bc81572a3d8a64e454
- MD5 71a7d6ad78e98e09bef1326427dfb144
- SHA1 38918cc54cfa238ada103afb6bab6868db750aae
- SHA512 5eacdbef8eedd3ebe267b3d1933bc065f5c0aad51f24847612c7bf1ed7fd77522338db5f78b1322a1a049b0cb634cc6897db1584ff9d2215f0dd79f61d5d1dd5
- SSDEEP 1536:f4lAePxJXdLXrnu2lAK/8n7cJCrHj899WZoZfKZKqK3YWPTnsxn0uIPE:f4lAILPlroHj8XWZ0fmK5IHxn8M
- TLSH T145E35BAAA7087C91DD1A57B28032D6792670BC72A7F1211D36F9FF3FA1B32065407326
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
19434
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
C:\Users\thorson\Desktop\Launcher1\Launcher\Launcher\obj\Debug\LUNCHER CRACKING.pdb
mscoree
_CorExeMain
Name
.text
Size
11KB
Virtual Size
10KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
134KB
Virtual Size
134KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
7Smoker Pro 2.0/WinTypes/.gitattributes.exe
- SHA256 17bd875b76b60688fabb72bdecb71e5281b3fa186e0391bb9260dd6abc7147f1
- MD5 abcaf24a058ff06816c16fa79666ecee
- SHA1 1f9ce0a43402b034689cd14fd2792e0b647c697a
- SHA512 d179584e9d1f50d70fe96c33b6aa79943c35604fb2b64091ba951aa3eaa0b7ab16c4391213a32ba48b2a110194da62871f4faab39a7cf6993a9e7f0414f55613
- SSDEEP 49152:C9tkZTv7a8bpNPFnYaZPRSp4R3kzRED+p6Di:MtkV7a8bpTZPRHloRED2ki
- TLSH T1E38533AFCA91AA31E029ED3C0F69D0149F2E3E185538715270ED4D7A5F376229B187E3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
-
Inno Setup is an open-source installation builder for Windows applications.
Inno Setup installer
Minor OS version
0
Major OS version
1
Entry point
42488
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
PDB paths
Name
CODE
Size
39KB
Virtual Size
39KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
DATA
Size
1024B
Virtual Size
592B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
BSS
Size
Virtual Size
3KB
Characteristics
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.idata
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
Virtual Size
8B
Characteristics
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
512B
Virtual Size
24B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
11KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
7Smoker Pro 2.0/WinTypes/Ionic.Zip.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 17bb0c9be45289a2be56a5f5a68ec9891d7792b886e0054bc86d57fe84d01c89
- MD5 f6933bf7cee0fd6c80cdf207ff15a523
- SHA1 039eeb1169e1defe387c7d4ca4021bce9d11786d
- SHA512 88675512daa41e17ce4daf6ca764ccb17cd9633a7c2b7545875089cae60f6918909a947f3b1692d16ec5fa209e18e84bc0ff3594f72c3e677a6cca9f3a70b8d6
- SSDEEP 6144:OhagC/Mq25o9sXGtSV41OJDsTDDVUMle6ZjxLV/kHu4Bht79I9:iagxWS4msNUCe65fkHdBf9
- TLSH T183A4AD0427E90A55F4BE5BBAC0B69260C3B1B4166D6FD70F4EE020EE2D37790D9147AB
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
497294
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
c:\DotNetZip\Zip\obj\Debug\Ionic.Zip.pdb
mscoree
_CorDllMain
Name
.text
Size
478KB
Virtual Size
477KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
7Smoker Pro 2.0/WinTypes/LICENCE.dat
- SHA256 1f84a00808d5eca122fde7f20708f272c349fae1eaa1129b5c694750f2e047d6
- MD5 f3014a18051f4e596ab95da9138f6f6b
- SHA1 121aa1a333614aaf62399f56f19523ddb980e205
- SHA512 ae5873f0be4794853a9bd954cc0708c2eca0a5abeb6cd6dceb5882a2b6c16e85fea1edbbf030a6da0acf484141c8ae27d743e3fef2fe022a9bd3361a34571fa6
- SSDEEP 1536:Jw462yjUkilhdrvqBFVgEA84rD5hmjpCHUXAn0M86IYHSAEqFxTXKX9gx/ZI:Jw4gWlhBEF6FhmgTP86IYy9qLXA2i
- TLSH T1EB730266FF7E789D791ACB72CE534F6BDC63B4240E13632852D8CC719B0BC494685890
- MD5 SHA1 SHA512 SSDEEP TLSH
7Smoker Pro 2.0/WinTypes/Launcher.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 0d87b9b141a592711c52e7409ec64de3ab296cddc890be761d9af57cea381b32
- MD5 c6d4c881112022eb30725978ecd7c6ec
- SHA1 ba4f96dc374195d873b3eebdb28b633d9a1c5bf5
- SHA512 3bece10b65dfda69b6defbf50d067a59d1cd1db403547fdf28a4cbc87c4985a4636acfcff8300bd77fb91f2693084634d940a91517c33b5425258835ab990981
- SSDEEP 768:FKtnBTTQi/YqMFlVt52ftDhKeoNzZq8OujxUu5XEAb4b9yvMzUV5:qBTUgYFveDRuFEAb4b99QV5
- TLSH T11B332A489A4C9773C9ED46BE98E366904375C02B6B47E70FBC8982345E133EA194279F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
SmartAssembly .NET packer
Detects SmartAssembly .NET packer.
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
59614
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
50KB
Virtual Size
50KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
7Smoker Pro 2.0/mathml.css
- SHA256 c6b58e7f7067175eaacdeea3d06af52e0613131fecb14a5081173d5b5d90de76
- MD5 672e2b05f3967067be9f6fcdc0bd0704
- SHA1 238dce2f2e6b2406c3df3065004cc084a241812c
- SHA512 212d09e56dac449fa430985e0610cef7ca64abfe7d096c16eb830ecf06651efd1941832dabb955194b73f5e49581a96a4db06e701d725f9b5bece8a57ea9b3cc
- SSDEEP 192:KHfbXF99yu/H0o7DkIFRat6nMGiUeIwWIOIjLpAB055G4gjTCI4+v0C1QWwI8Ugj:q9yu/HmIxSJWIOIjLpAB05MCYuWwSNA
- TLSH T1D962B926BA942F2110110241BB1FF7D1E71C806B337A9DAC395D712C6F4EEA503B6BAC
- MD5 SHA1 SHA512 SSDEEP TLSH
7Smoker Pro 2.0/platform.js
- SHA256 a319126b701f722a192e0653d2698b8d855e43d56153069ad1255879a0affcb7
- MD5 e3c0b603d8720a81116319d44ee421e6
- SHA1 6b7554f4fb3f1a4f22c1b09f0d1e84eb9438450b
- SHA512 b398fc5f36d54ac60f6487bf950298c03ba9a01821164973c1b999d4d63b280e2271749be803bdfb9593642b79fbf6a8546eb15684b1496bf0432deab21afa6f
- TLSH T183B0120019519C420330110260C713261539139B006B90088055411D9450F52C55F1B6
- MD5 SHA1 SHA512 TLSH