2026-04-16_85121bb987af787edd8013718d6c209c_amadey_elex_smoke-loader

General

Target
2026-04-16_85121bb987af787edd8013718d6c209c_amadey_elex_smoke-loader
Size 1.3MB
Sample260416-tk2xtshv4w
SHA256 36816eb5ea6677defb799a9ee21941002b7eb46db6a93ec2ffd886e2b7a0f31d
MD5 85121bb987af787edd8013718d6c209c
SHA1 3d0dd00134f745949d50200420adf0476c375a7f
SHA512 64c4590edf7ff265b579de4ec5d9c895c0303eea731c2dfe878191ee04c7248dbf8aecc51524067c5f194898387cf98affe03e2ca89beb78b246e819615a73b0
SSDEEP 12288:bbvqk4iVVnXc3ajG+hjQKymY8efKCpD7Gj9G6G1qT8nQkCu83L3Wl/np9DBDt3kw:bTq1+nsqjnhMgeiCl7G0nehbGZpbD
TLSH
T19A55232AB1448073D99241F587F5CB3AAC33BDB5573408D3EF5A2DF89B620D0873A25A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-04-16_85121bb987af787edd8013718d6c209c_amadey_elex_smoke-loader

File Explorer

2026-04-16_85121bb987af787edd8013718d6c209c_amadey_elex_smoke-loader

.exe 1.3MB

2026-04-16_85121bb987af787edd8013718d6c209c_amadey_elex_smoke-loader

IMPHASH 1665839200a65d025db1cbab5f8050be
SHA256 36816eb5ea6677defb799a9ee21941002b7eb46db6a93ec2ffd886e2b7a0f31d
MD5 85121bb987af787edd8013718d6c209c
SHA1 3d0dd00134f745949d50200420adf0476c375a7f
SHA512 64c4590edf7ff265b579de4ec5d9c895c0303eea731c2dfe878191ee04c7248dbf8aecc51524067c5f194898387cf98affe03e2ca89beb78b246e819615a73b0
SSDEEP 12288:bbvqk4iVVnXc3ajG+hjQKymY8efKCpD7Gj9G6G1qT8nQkCu83L3Wl/np9DBDt3kw:bTq1+nsqjnhMgeiCl7G0nehbGZpbD
TLSH
T19A55232AB1448073D99241F587F5CB3AAC33BDB5573408D3EF5A2DF89B620D0873A25A
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

63493

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

advapi32

AdjustTokenPrivileges LookupPrivilegeValueA OpenProcessToken GetSecurityDescriptorLength GetKernelObjectSecurity

kernel32

GetVolumeInformationA GetFileAttributesA GetFullPathNameA FileTimeToSystemTime FileTimeToLocalFileTime FindClose FindFirstFileA CloseHandle SetFileTime LocalFileTimeToFileTime DosDateTimeToFileTime CreateFileA GetVersion GetFileType GetFileTime ReadFile SetConsoleMode GetConsoleMode FindNextFileA GetLastError HeapFree HeapAlloc GetProcessHeap GetCurrentProcess InitializeCriticalSection ReleaseMutex WaitForSingleObject InterlockedExchange CreateMutexA lstrcpynA GetDriveTypeA lstrcmpiA LeaveCriticalSection EnterCriticalSection lstrlenA ExitProcess GetProcAddress GetModuleHandleA TerminateProcess SetConsoleCtrlHandler GetSystemTimeAsFileTime MultiByteToWideChar MoveFileA SetStdHandle HeapReAlloc GetCommandLineA GetVersionExA HeapDestroy HeapCreate VirtualFree VirtualAlloc SetFilePointer SetHandleCount GetStdHandle GetStartupInfoA WriteFile FlushFileBuffers WideCharToMultiByte UnhandledExceptionFilter GetCPInfo GetUserDefaultLCID GetLocaleInfoA EnumSystemLocalesA IsValidLocale IsValidCodePage GetStringTypeA GetStringTypeW SetEndOfFile GetTimeZoneInformation GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW HeapSize CompareStringA CompareStringW GetACP GetOEMCP SetEnvironmentVariableA VirtualProtect GetSystemInfo VirtualQuery QueryPerformanceCounter GetTickCount GetCurrentThreadId GetCurrentProcessId LoadLibraryA RtlUnwind LCMapStringA LCMapStringW GetLocaleInfoW DeleteFileA SetFileAttributesA GetFileInformationByHandle PeekNamedPipe RemoveDirectoryA SetEnvironmentVariableW GetCurrentDirectoryA GetExitCodeProcess CreateProcessA

Sharing

General

Malware Config

Signatures

File Explorer

2026-04-16_85121bb987af787edd8013718d6c209c_amadey_elex_smoke-loader

advapi32

kernel32

generic