2026-07-07_4c3dbdfc2c9f29be11eed587d6de717c_amadey_elex_glassworm_smoke-loader_stop

General

Target
2026-07-07_4c3dbdfc2c9f29be11eed587d6de717c_amadey_elex_glassworm_smoke-loader_stop
Size 1.7MB
Sample260707-tre2msh18m
SHA256 25e8d134099a74d3207bdb40e3f2450d8d7f24ad496dbe3acef65ec844216435
MD5 4c3dbdfc2c9f29be11eed587d6de717c
SHA1 f22e1b0895f4bea39f24efeaa1150364db5e71dc
SHA512 903084e3f34231bf7b8239fcae1cfe144dde5967a32ef5c8b207478452e3b79ba75ba20140a8cd66451cca60697cc843f8b23d9ff5f3ed447687e54d256e889a
SSDEEP 24576:usPlnT/jhPsJh2Gle+vjnQ/tbw/2Mkjy6Fr7g0oX:z/RU2GlpjQ/lFTjN4
TLSH
T18585E0047BA1C0F2EB4202F24C3ACB5A5E3697416B350EC7F7C80E6D5E662E16E7925D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-07_4c3dbdfc2c9f29be11eed587d6de717c_amadey_elex_glassworm_smoke-loader_stop

File Explorer

2026-07-07_4c3dbdfc2c9f29be11eed587d6de717c_amadey_elex_glassworm_smoke-loader_stop

.exe 1.7MB

2026-07-07_4c3dbdfc2c9f29be11eed587d6de717c_amadey_elex_glassworm_smoke-loader_stop

IMPHASH 57cafac75c901b30b55e65053d6c3a3c
SHA256 25e8d134099a74d3207bdb40e3f2450d8d7f24ad496dbe3acef65ec844216435
MD5 4c3dbdfc2c9f29be11eed587d6de717c
SHA1 f22e1b0895f4bea39f24efeaa1150364db5e71dc
SHA512 903084e3f34231bf7b8239fcae1cfe144dde5967a32ef5c8b207478452e3b79ba75ba20140a8cd66451cca60697cc843f8b23d9ff5f3ed447687e54d256e889a
SSDEEP 24576:usPlnT/jhPsJh2Gle+vjnQ/tbw/2Mkjy6Fr7g0oX:z/RU2GlpjQ/lFTjN4
TLSH
T18585E0047BA1C0F2EB4202F24C3ACB5A5E3697416B350EC7F7C80E6D5E662E16E7925D
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

281577

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

c:\Data Volume\Projects\mpeg4ip\release\mp4creator.pdb

ws2_32

htons htonl ntohl ntohs

kernel32

VirtualAlloc SetEnvironmentVariableA CompareStringW CompareStringA GetTempFileNameA GetLastError HeapFree HeapAlloc EnterCriticalSection LeaveCriticalSection HeapReAlloc GetProcAddress GetModuleHandleA ExitProcess CloseHandle FileTimeToSystemTime FileTimeToLocalFileTime GetFileInformationByHandle PeekNamedPipe GetFileType WriteFile WideCharToMultiByte GetConsoleCP GetConsoleMode GetFileAttributesA GetCommandLineA GetVersionExA GetProcessHeap CreateFileA SetEndOfFile MultiByteToWideChar ReadFile SetFilePointer GetTimeFormatA GetDateFormatA MoveFileA DeleteFileA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent SetHandleCount GetStdHandle GetStartupInfoA DeleteCriticalSection HeapDestroy HeapCreate VirtualFree GetModuleFileNameA Sleep GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId HeapSize LoadLibraryA InitializeCriticalSection SetStdHandle RtlUnwind WriteConsoleA GetConsoleOutputCP WriteConsoleW RaiseException FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetTimeZoneInformation LCMapStringA LCMapStringW FlushFileBuffers GetStringTypeA GetStringTypeW GetLocaleInfoA

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-07_4c3dbdfc2c9f29be11eed587d6de717c_amadey_elex_glassworm_smoke-loader_stop

ws2_32

kernel32

generic