2026-07-02_155322cdd5a0feef9bae06d325435799_elex_smoke-loader_wapomi

General

Target
2026-07-02_155322cdd5a0feef9bae06d325435799_elex_smoke-loader_wapomi
Size 28KB
Sample260702-ktsk3sds8j
SHA256 9852b18cd25d442d93e2beee7462a5fcc23328eebce43702c88ccf6de64ebdf9
MD5 155322cdd5a0feef9bae06d325435799
SHA1 25e6518a47e03464839c088c0054238c2d9b8fb4
SHA512 cf06735690f50861220d4b31103456c309b4cf0240a19185671f4a8be6853286d45c1dcd075e04025935001483ec0ccf73b7e5c9b362607c91a9750eb4a91b31
SSDEEP 768:b3ZSS0I/pK0EX7Yzb+Qj3bQGPL4vzZq2o9W7GsxBbPr:b3Zpp/c0EX7jg3cGCq2iW7z
TLSH
T150D2AF83DDD084F7CF86257620336557CBB796308FA595F7A7A4C8610DA5840F82B4AE
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-02_155322cdd5a0feef9bae06d325435799_elex_smoke-loader_wapomi

File Explorer

2026-07-02_155322cdd5a0feef9bae06d325435799_elex_smoke-loader_wapomi

.exe 28KB

2026-07-02_155322cdd5a0feef9bae06d325435799_elex_smoke-loader_wapomi

IMPHASH 175cc2d82aa96e5d527b5872acd43c3e
SHA256 9852b18cd25d442d93e2beee7462a5fcc23328eebce43702c88ccf6de64ebdf9
MD5 155322cdd5a0feef9bae06d325435799
SHA1 25e6518a47e03464839c088c0054238c2d9b8fb4
SHA512 cf06735690f50861220d4b31103456c309b4cf0240a19185671f4a8be6853286d45c1dcd075e04025935001483ec0ccf73b7e5c9b362607c91a9750eb4a91b31
SSDEEP 768:b3ZSS0I/pK0EX7Yzb+Qj3bQGPL4vzZq2o9W7GsxBbPr:b3Zpp/c0EX7jg3cGCq2iW7z
TLSH
T150D2AF83DDD084F7CF86257620336557CBB796308FA595F7A7A4C8610DA5840F82B4AE
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

32768

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

D:\a\1\s\Win32\Release\idevice_id.pdb

kernel32

IsDebuggerPresent InitializeSListHead GetSystemTimeAsFileTime GetCurrentThreadId GetCurrentProcessId QueryPerformanceCounter IsProcessorFeaturePresent TerminateProcess GetCurrentProcess SetUnhandledExceptionFilter UnhandledExceptionFilter GetModuleHandleW

getopt

optind getopt_long_a

imobiledevice

lockdownd_get_device_name idevice_free idevice_new_with_options lockdownd_client_free idevice_get_device_list_extended lockdownd_client_new idevice_set_debug_level idevice_device_list_extended_free

vcruntime140

strrchr __current_exception __current_exception_context memset _except_handler4_common

api-ms-win-crt-stdio-l1-1-0

__p__commode _set_fmode __acrt_iob_func __stdio_common_vfprintf

api-ms-win-crt-heap-l1-1-0

_set_new_mode free

api-ms-win-crt-runtime-l1-1-0

_exit _configure_narrow_argv _initialize_narrow_environment __p___argc _get_initial_narrow_environment _cexit _c_exit _register_onexit_function _set_app_type _crt_atexit _controlfp_s terminate _initialize_onexit_table _seh_filter_exe _initterm _register_thread_local_exe_atexit_callback exit __p___argv _initterm_e

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

Name

.text

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

904B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

512B

Virtual Size

480B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

512B

Virtual Size

460B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

#x��u�

Size

16KB

Virtual Size

20KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-02_155322cdd5a0feef9bae06d325435799_elex_smoke-loader_wapomi

kernel32

getopt

imobiledevice

vcruntime140

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-locale-l1-1-0

generic