2026-06-26_2d53d63fe087b27f4fe0e2116bf4addf_elex_smoke-loader_wapomi

Sharing

Copy URL Twitter E-mail

General

Target
2026-06-26_2d53d63fe087b27f4fe0e2116bf4addf_elex_smoke-loader_wapomi
Size 45KB
Sample260629-vsb7tab17j
SHA256 9332ad96b2cd0c6b97aa78b32efc1d426e8c15f5350b626e6607c60fa018f1de
MD5 2d53d63fe087b27f4fe0e2116bf4addf
SHA1 166aa79f666d5cb3e50cdaa2e34d72e2d53025be
SHA512 596bcfa2b3c88fb2b52704bda7d7633ac50cdcbd8c8f7f9cce63c5747911f4828745cba8e3a4b62644472f15a002d8f1e58b586da590d827c4fb36d3d7660156
SSDEEP 768:krKwOi0dzM061VDuyEE6ZkRFBWQGPL4vzZq2o9W7GsxBbPr:kr4i0hMHD8P+PNGCq2iW7z
TLSH
T111234A5197E44539F0F72A3076B52A120F7ABD309E71D3CF969089AA28B9BD0DD70723
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-06-26_2d53d63fe087b27f4fe0e2116bf4addf_elex_smoke-loader_wapomi

File Explorer

2026-06-26_2d53d63fe087b27f4fe0e2116bf4addf_elex_smoke-loader_wapomi

.exe 45KB

2026-06-26_2d53d63fe087b27f4fe0e2116bf4addf_elex_smoke-loader_wapomi

IMPHASH 662b49aadf6d088e6326ef93f7c9f456
SHA256 9332ad96b2cd0c6b97aa78b32efc1d426e8c15f5350b626e6607c60fa018f1de
MD5 2d53d63fe087b27f4fe0e2116bf4addf
SHA1 166aa79f666d5cb3e50cdaa2e34d72e2d53025be
SHA512 596bcfa2b3c88fb2b52704bda7d7633ac50cdcbd8c8f7f9cce63c5747911f4828745cba8e3a4b62644472f15a002d8f1e58b586da590d827c4fb36d3d7660156
SSDEEP 768:krKwOi0dzM061VDuyEE6ZkRFBWQGPL4vzZq2o9W7GsxBbPr:kr4i0hMHD8P+PNGCq2iW7z
TLSH
T111234A5197E44539F0F72A3076B52A120F7ABD309E71D3CF969089AA28B9BD0DD70723
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

69632

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

e:\github\libusbk\libusbk\bin\exe\i386\dpscat.pdb

advapi32

CryptDestroyKey CryptGenKey CryptAcquireContextW CryptReleaseContext

kernel32

OutputDebugStringA WriteConsoleW WriteFile GetStdHandle LockResource LoadResource SizeofResource FindResourceA FindNextFileW FindFirstFileW SetLastError GetLastError GetCurrentDirectoryW GetNativeSystemInfo LocalFree FreeConsole SetConsoleCursorPosition ReadConsoleOutputCharacterW GetConsoleScreenBufferInfo AttachConsole GetCommandLineW HeapAlloc HeapCreate HeapDestroy HeapFree GetVersionExW LoadLibraryA GetModuleHandleA VerifyVersionInfoW VerSetConditionMask FormatMessageW GetProcAddress CloseHandle CreateFileW GetFileAttributesW UnhandledExceptionFilter GetCurrentProcess TerminateProcess GetSystemTimeAsFileTime GetCurrentProcessId GetCurrentThreadId GetTickCount QueryPerformanceCounter SetUnhandledExceptionFilter RtlUnwind GetStartupInfoW InterlockedCompareExchange Sleep InterlockedExchange

user32

wsprintfW

msvcrt

exit _wcmdln _initterm _amsg_exit __setusermatherr __p__commode __p__fmode __set_app_type ?terminate@@YAXXZ _controlfp _XcptFilter _wcslwr _cexit __wgetmainargs _errno malloc free mbstowcs wcstombs _wcsnset memset _wcsicmp _wfopen fwrite _snwprintf fflush fclose _vsnwprintf wcstoul _wcsnicmp _exit

setupapi

SetupFindNextLine SetupGetStringFieldW SetupDiGetActualSectionToInstallExW SetupCloseInfFile SetupFindNextMatchLineW SetupOpenInfFileW SetupFindFirstLineW

shlwapi

PathMatchSpecW PathRelativePathToW PathRemoveFileSpecW PathAppendW PathStripPathW PathFileExistsW

shell32

CommandLineToArgvW

Sharing

General

Malware Config

Signatures

File Explorer

2026-06-26_2d53d63fe087b27f4fe0e2116bf4addf_elex_smoke-loader_wapomi

advapi32

kernel32

user32

msvcrt

setupapi

shlwapi

shell32

generic