2026-06-27_c5cc0c6651c71ccb06305ac9cf88de11_elex_smoke-loader_wapomi

Sharing

Copy URL Twitter E-mail

General

Target
2026-06-27_c5cc0c6651c71ccb06305ac9cf88de11_elex_smoke-loader_wapomi
Size 44KB
Sample260629-dlvbdaby7v
SHA256 a6c7cbc9367700f58ec2ae4ab12e14ad6acfc218ec940c1dfdb7db80999009a0
MD5 c5cc0c6651c71ccb06305ac9cf88de11
SHA1 e948deab33fcb4376a8c4cdec60c2d31ae1ddd8d
SHA512 10ff9f7d702342096f9778d1c8b349fbef8c56ac9a36c5a2222446b468a6c17cd5f8cdcebf3684f2555273a4863d1c0ef8502f5b6fc9fd8a01c5127b8a56d67c
SSDEEP 768:Ucb7hsKbZ2SqQGPL4vzZq2o9W7GsxBbPr:UW7WArJGCq2iW7z
TLSH
T195134C879EA04D6AC54EEC3444AB1AF5DB71AC756F128A7F6660FD8D2C36704AC1322C
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-06-27_c5cc0c6651c71ccb06305ac9cf88de11_elex_smoke-loader_wapomi

File Explorer

2026-06-27_c5cc0c6651c71ccb06305ac9cf88de11_elex_smoke-loader_wapomi

.exe 44KB

2026-06-27_c5cc0c6651c71ccb06305ac9cf88de11_elex_smoke-loader_wapomi

IMPHASH 1606de8daf332eae8f6cca2e5fc5529d
SHA256 a6c7cbc9367700f58ec2ae4ab12e14ad6acfc218ec940c1dfdb7db80999009a0
MD5 c5cc0c6651c71ccb06305ac9cf88de11
SHA1 e948deab33fcb4376a8c4cdec60c2d31ae1ddd8d
SHA512 10ff9f7d702342096f9778d1c8b349fbef8c56ac9a36c5a2222446b468a6c17cd5f8cdcebf3684f2555273a4863d1c0ef8502f5b6fc9fd8a01c5127b8a56d67c
SSDEEP 768:Ucb7hsKbZ2SqQGPL4vzZq2o9W7GsxBbPr:UW7WArJGCq2iW7z
TLSH
T195134C879EA04D6AC54EEC3444AB1AF5DB71AC756F128A7F6660FD8D2C36704AC1322C
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

98304

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

hipo

hipoInitConfig hipoPlot

mfc42u

ord4606 ord4604 ord4269 ord6371 ord4480 ord2546 ord2504 ord5727 ord3917 ord1089 ord2388 ord3341 ord5296 ord5298 ord2717 ord4074 ord4692 ord5303 ord5285 ord5710 ord2977 ord3142 ord3254 ord4459 ord3131 ord3257 ord2980 ord3076 ord2971 ord3825 ord3826 ord3820 ord3074 ord4075 ord4616 ord4418 ord3733 ord561 ord825 ord815 ord6211 ord617 ord5297 ord5208 ord296 ord986 ord520 ord823 ord4154 ord6113 ord2613 ord1131 ord5261 ord4370 ord4847 ord4992 ord4704 ord2506 ord6048 ord4073 ord1767 ord4401 ord5237 ord2377 ord5157 ord6370 ord4347 ord5276 ord3793 ord4831 ord4435 ord2640 ord2047 ord6372 ord3744 ord5059 ord1720 ord5257 ord2438 ord2116 ord5273 ord4621 ord4419 ord3592 ord324 ord641 ord4229 ord5193 ord1834 ord4237 ord2715 ord2382 ord1569 ord5094 ord5097 ord4461 ord4298 ord3345 ord5006 ord975 ord5468 ord3398 ord2874 ord2873 ord4146 ord1165 ord4072 ord1768 ord5233 ord5278 ord2641 ord1658 ord4430 ord4421 ord796 ord674 ord554 ord529 ord366 ord807 ord2486 ord2619 ord2618 ord5996 ord2109 ord4158 ord6617 ord4451 ord5248 ord1817 ord4233 ord4690 ord3053 ord3060 ord6332 ord2502 ord2534 ord5239 ord5736 ord1739 ord5573 ord3167 ord5649 ord4414 ord4947 ord4852 ord2391 ord4381 ord3449 ord3193 ord6076 ord6171 ord4617 ord4420 ord338 ord652 ord4817 ord1937 ord4268 ord4583 ord4582 ord4893 ord4364 ord4886 ord5070 ord4335 ord4343 ord4717 ord4884 ord4525 ord4539 ord4537 ord4520 ord4523 ord4518 ord4958 ord4955 ord4103 ord5236 ord5286 ord3743 ord1719 ord4426 ord560 ord813 ord5256 ord3054 ord6051

msvcrt

_XcptFilter exit _wcmdln __wgetmainargs _initterm __setusermatherr _adjust_fdiv __p__commode __p__fmode __set_app_type _except_handler3 __dllonexit _onexit _controlfp _exit __CxxFrameHandler

kernel32

GetModuleHandleW GetStartupInfoW

user32

UpdateWindow PostQuitMessage MessageBoxA EnableWindow

Sharing

General

Malware Config

Signatures

File Explorer

2026-06-27_c5cc0c6651c71ccb06305ac9cf88de11_elex_smoke-loader_wapomi

hipo

mfc42u

msvcrt

kernel32

user32

generic