2026-07-01_5ede71fdd676c19aac00c092f96e09be_amadey_elex_smoke-loader

General

Target
2026-07-01_5ede71fdd676c19aac00c092f96e09be_amadey_elex_smoke-loader
Size 370KB
Sample260701-lpg48aay2p
SHA256 2ab8df2e15c0b386db1bdf5c32d52b5953754321b4eec9a79bbbd9d679052a53
MD5 5ede71fdd676c19aac00c092f96e09be
SHA1 e3856821333572d09bcd41f6782482f3e0b1c1f0
SHA512 f4d42a6999ad1821d35b7fb9ac9195d61425bb6bf332979c95c0d539ae4b2566a5870fa35ff10ff90e779cd5e396ded530359153443dc5fea384a91848424d77
SSDEEP 6144:oGqVZFcYYFlx42PmRCznBgAOgDR3XCcyJbKdW8BpxuIk3PbzkWxU:o1VZFczdPmCznBgeDV78b2W8Bp0bTzkX
TLSH
T19484AE11B5D2C472D9B20E340C69EB954A3A7D210EB3CE3BA7D5371E0E74DC19732AA6
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-01_5ede71fdd676c19aac00c092f96e09be_amadey_elex_smoke-loader

File Explorer

2026-07-01_5ede71fdd676c19aac00c092f96e09be_amadey_elex_smoke-loader

.exe 370KB

2026-07-01_5ede71fdd676c19aac00c092f96e09be_amadey_elex_smoke-loader

IMPHASH a99648a4d417f4130faca9d4625edb8e
SHA256 2ab8df2e15c0b386db1bdf5c32d52b5953754321b4eec9a79bbbd9d679052a53
MD5 5ede71fdd676c19aac00c092f96e09be
SHA1 e3856821333572d09bcd41f6782482f3e0b1c1f0
SHA512 f4d42a6999ad1821d35b7fb9ac9195d61425bb6bf332979c95c0d539ae4b2566a5870fa35ff10ff90e779cd5e396ded530359153443dc5fea384a91848424d77
SSDEEP 6144:oGqVZFcYYFlx42PmRCznBgAOgDR3XCcyJbKdW8BpxuIk3PbzkWxU:o1VZFczdPmCznBgeDV78b2W8Bp0bTzkX
TLSH
T19484AE11B5D2C472D9B20E340C69EB954A3A7D210EB3CE3BA7D5371E0E74DC19732AA6
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

34859

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\Users\ani\code\squirrel\squirrel.windows\build\Release\Win32\StubExecutable.pdb

kernel32

GetModuleFileNameW GetModuleHandleW FindFirstFileW FindNextFileW FindClose CreateProcessW CreateFileW CloseHandle WideCharToMultiByte GetLastError MultiByteToWideChar GetStringTypeW EncodePointer DecodePointer SetLastError InitializeCriticalSectionAndSpinCount SwitchToThread TlsAlloc TlsGetValue TlsSetValue TlsFree GetSystemTimeAsFileTime GetProcAddress EnterCriticalSection LeaveCriticalSection DeleteCriticalSection LCMapStringW GetLocaleInfoW GetCPInfo UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent IsDebuggerPresent GetStartupInfoW QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId InitializeSListHead RtlUnwind RaiseException FreeLibrary LoadLibraryExW ExitProcess GetModuleHandleExW GetStdHandle WriteFile HeapFree HeapAlloc IsValidLocale GetUserDefaultLCID EnumSystemLocalesW HeapReAlloc GetFileType FindFirstFileExW IsValidCodePage GetACP GetOEMCP GetCommandLineA GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW GetProcessHeap SetStdHandle SetFilePointerEx HeapSize FlushFileBuffers GetConsoleCP GetConsoleMode WriteConsoleW

user32

AllowSetForegroundWindow WaitForInputIdle

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-01_5ede71fdd676c19aac00c092f96e09be_amadey_elex_smoke-loader

kernel32

user32

generic