2025-04-12_060029c8c2aca9ed45367e412b298557_amadey_elex_mafia_smoke-loader | Triage

Sharing

General

Target

2025-04-12_060029c8c2aca9ed45367e412b298557_amadey_elex_mafia_smoke-loader
Size

1.6MB
MD5

060029c8c2aca9ed45367e412b298557
SHA1

85d5f41f531e65d8435dde3bf7f2fe6d19412f9e
SHA256

c9c0e8c7ef86cf19ac93b4d5742aeb666c815e6dfdb5585e4b87b1dfb5bf56c1
SHA512

e2a3322bf729a7d8cb61b958a39c3320436ff872e91df0cd36b112cf210ac42288445a582ae3b8de9008cfbb3fb7641ad92b724a05cf4066baa9f101a2a91f91
SSDEEP

24576:YvO2xJKRI2FOkx2LFEvcUQPxuZ98Es8k3OH3C0rQ6+8pKJJFo3Q+qdCOKIbAKjH4:YHHKO29Qm5QZuTtS0rQMYOQ+q8CEKT4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2025-04-12_060029c8c2aca9ed45367e412b298557_amadey_elex_mafia_smoke-loader

Files

2025-04-12_060029c8c2aca9ed45367e412b298557_amadey_elex_mafia_smoke-loader
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 142KB - Virtual size: 143KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 62KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 25KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 132KB - Virtual size: 135KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ