2026-05-22_14b71ab01f74ab3750c64efad078c3b9_amadey_elex_smoke-loader

General

Target
2026-05-22_14b71ab01f74ab3750c64efad078c3b9_amadey_elex_smoke-loader
Size 346KB
Sample260522-c8ry4afx71
SHA256 ee0cd65d5bbd2e765afd8ac766c1623833f823ed67bcd86f023aea99a5feeb5f
MD5 14b71ab01f74ab3750c64efad078c3b9
SHA1 98ff3edfe012c53183d8f3ce7fd4490ab242013d
SHA512 6d4b7ec60d008dccc65050d80b57fba3bbd816828d9fe1444e8af46923ecae60ada3aaa37b5606de8dba7c83c4ca667771d4d8215e24b87239a4f532a47c68bc
SSDEEP 6144:b1O6b1LeigRf5UELWAOy5rF+2/wq0FfsdU:b1Bb1LeNjLW8HkqndU
TLSH
T1C0748D11B1E2C071D46D17780C74EB62032A7CD94E5D9F3B6BF8B2AE5F70AD126219E2
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-05-22_14b71ab01f74ab3750c64efad078c3b9_amadey_elex_smoke-loader

File Explorer

2026-05-22_14b71ab01f74ab3750c64efad078c3b9_amadey_elex_smoke-loader

.exe 346KB

2026-05-22_14b71ab01f74ab3750c64efad078c3b9_amadey_elex_smoke-loader

IMPHASH a99648a4d417f4130faca9d4625edb8e
SHA256 ee0cd65d5bbd2e765afd8ac766c1623833f823ed67bcd86f023aea99a5feeb5f
MD5 14b71ab01f74ab3750c64efad078c3b9
SHA1 98ff3edfe012c53183d8f3ce7fd4490ab242013d
SHA512 6d4b7ec60d008dccc65050d80b57fba3bbd816828d9fe1444e8af46923ecae60ada3aaa37b5606de8dba7c83c4ca667771d4d8215e24b87239a4f532a47c68bc
SSDEEP 6144:b1O6b1LeigRf5UELWAOy5rF+2/wq0FfsdU:b1Bb1LeNjLW8HkqndU
TLSH
T1C0748D11B1E2C071D46D17780C74EB62032A7CD94E5D9F3B6BF8B2AE5F70AD126219E2
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

34859

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\Users\ani\code\squirrel\squirrel.windows\build\Release\Win32\StubExecutable.pdb

kernel32

GetModuleFileNameW GetModuleHandleW FindFirstFileW FindNextFileW FindClose CreateProcessW CreateFileW CloseHandle WideCharToMultiByte GetLastError MultiByteToWideChar GetStringTypeW EncodePointer DecodePointer SetLastError InitializeCriticalSectionAndSpinCount SwitchToThread TlsAlloc TlsGetValue TlsSetValue TlsFree GetSystemTimeAsFileTime GetProcAddress EnterCriticalSection LeaveCriticalSection DeleteCriticalSection LCMapStringW GetLocaleInfoW GetCPInfo UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent IsDebuggerPresent GetStartupInfoW QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId InitializeSListHead RtlUnwind RaiseException FreeLibrary LoadLibraryExW ExitProcess GetModuleHandleExW GetStdHandle WriteFile HeapFree HeapAlloc IsValidLocale GetUserDefaultLCID EnumSystemLocalesW HeapReAlloc GetFileType FindFirstFileExW IsValidCodePage GetACP GetOEMCP GetCommandLineA GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW GetProcessHeap SetStdHandle SetFilePointerEx HeapSize FlushFileBuffers GetConsoleCP GetConsoleMode WriteConsoleW

user32

AllowSetForegroundWindow WaitForInputIdle

Sharing

General

Malware Config

Signatures

File Explorer

2026-05-22_14b71ab01f74ab3750c64efad078c3b9_amadey_elex_smoke-loader

kernel32

user32

generic