2026-06-29_25562e6382ed815438d40ca9cc673aeb_elex_smoke-loader_wapomi

Sharing

Copy URL Twitter E-mail

General

Target
2026-06-29_25562e6382ed815438d40ca9cc673aeb_elex_smoke-loader_wapomi
Size 33KB
Sample260630-n1ymfset2n
SHA256 a736ac10c8e86f18bfb3db48b013ddab3aa11214514321c405fa20c19d5dad49
MD5 25562e6382ed815438d40ca9cc673aeb
SHA1 8278a570e48f8c188655e46c119346fa729f7f86
SHA512 cb1071e8ed1867dbbe9b856f601c8b14a5d2e060a94e699982630eb4bf989cec62d8e6eb5c907eafe6f46958c9d21c0bb9eff5b72f1596d28ba601ab59eabb5f
SSDEEP 768:xYYN9gm8RyxX7fIYzW9BXwM72UFdQGPL4vzZq2o9W7GsxBbPr:XN9gm8cxXLIYzW9BXw7UFqGCq2iW7z
TLSH
T108F2AF83DEC3D8B2C5EA18B1647B7947CABB23208F63E5EBE7500C644996C80B43B55D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-06-29_25562e6382ed815438d40ca9cc673aeb_elex_smoke-loader_wapomi

File Explorer

2026-06-29_25562e6382ed815438d40ca9cc673aeb_elex_smoke-loader_wapomi

.exe 33KB

2026-06-29_25562e6382ed815438d40ca9cc673aeb_elex_smoke-loader_wapomi

IMPHASH acea972eb45af3177e86a1efc41dfb7d
SHA256 a736ac10c8e86f18bfb3db48b013ddab3aa11214514321c405fa20c19d5dad49
MD5 25562e6382ed815438d40ca9cc673aeb
SHA1 8278a570e48f8c188655e46c119346fa729f7f86
SHA512 cb1071e8ed1867dbbe9b856f601c8b14a5d2e060a94e699982630eb4bf989cec62d8e6eb5c907eafe6f46958c9d21c0bb9eff5b72f1596d28ba601ab59eabb5f
SSDEEP 768:xYYN9gm8RyxX7fIYzW9BXwM72UFdQGPL4vzZq2o9W7GsxBbPr:XN9gm8cxXLIYzW9BXw7UFqGCq2iW7z
TLSH
T108F2AF83DEC3D8B2C5EA18B1647B7947CABB23208F63E5EBE7500C644996C80B43B55D
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

32768

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

D:\a\1\s\Win32\Release\irecovery.pdb

kernel32

Sleep IsDebuggerPresent InitializeSListHead GetSystemTimeAsFileTime GetCurrentThreadId GetCurrentProcessId QueryPerformanceCounter IsProcessorFeaturePresent TerminateProcess GetCurrentProcess SetUnhandledExceptionFilter UnhandledExceptionFilter GetModuleHandleW

readline

add_history readline write_history read_history

getopt

getopt_a optarg_a

irecovery

irecv_get_device_info irecv_close irecv_get_mode irecv_strerror irecv_set_debug_level irecv_reset irecv_devices_get_device_by_client irecv_reboot irecv_open_with_ecid irecv_trigger_limera1n_exploit irecv_execute_script irecv_event_subscribe irecv_send_command irecv_setenv irecv_saveenv irecv_send_file irecv_receive irecv_getenv

vcruntime140

__current_exception_context strstr strrchr __current_exception memset _except_handler4_common strchr

api-ms-win-crt-stdio-l1-1-0

rewind __stdio_common_vfprintf fseek fclose _set_fmode fflush fopen __p__commode ftell fread __acrt_iob_func

api-ms-win-crt-string-l1-1-0

_strdup strtok

api-ms-win-crt-convert-l1-1-0

strtoull

api-ms-win-crt-heap-l1-1-0

free _set_new_mode malloc

api-ms-win-crt-runtime-l1-1-0

_crt_atexit _controlfp_s _c_exit _cexit __p___argv _initialize_onexit_table __p___argc _exit exit _initterm_e _initterm terminate _register_thread_local_exe_atexit_callback _register_onexit_function _get_initial_narrow_environment _seh_filter_exe _set_app_type _configure_narrow_argv _initialize_narrow_environment

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

Name

.text

Size

8KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

6KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

920B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

512B

Virtual Size

480B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

1024B

Virtual Size

864B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

�{L��u�

Size

16KB

Virtual Size

20KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

File Explorer

2026-06-29_25562e6382ed815438d40ca9cc673aeb_elex_smoke-loader_wapomi

kernel32

readline

getopt

irecovery

vcruntime140

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-locale-l1-1-0

generic