2026-07-08_74807b381e0df990bebaed66426cb809_elex_smoke-loader_wapomi

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-08_74807b381e0df990bebaed66426cb809_elex_smoke-loader_wapomi
Size 260KB
Sample260708-e5ekpsay8z
SHA256 a7cb81a1f26d92520bed14d44b50e2d4be84eb8f79c8e5b01cd2c125e9787b3a
MD5 74807b381e0df990bebaed66426cb809
SHA1 4cc638a53d30a67f02a77c7b946fdef950e466c2
SHA512 44ff2fedd105804e447ef74ddb7828487d9a3c022782b03e9cedf0a5147ac9af76fa4bbcfa77bd2d4817d3fb295b30de9c3a356e0337bd0594c0c4709dc72e8f
SSDEEP 6144:T0h3aTaNsfI+gn8MUL/LykkROI7N4hHvom:2MWsfI/lU/kvMvo
TLSH
T1494449327A84D97BD881137664FC77A91D98E0A52F1C03C3E2DC4E699E57AF20634277
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-08_74807b381e0df990bebaed66426cb809_elex_smoke-loader_wapomi

File Explorer

2026-07-08_74807b381e0df990bebaed66426cb809_elex_smoke-loader_wapomi

.exe 260KB

2026-07-08_74807b381e0df990bebaed66426cb809_elex_smoke-loader_wapomi

IMPHASH 8d1c309c75f4f18d2cb27efdcb107e5b
SHA256 a7cb81a1f26d92520bed14d44b50e2d4be84eb8f79c8e5b01cd2c125e9787b3a
MD5 74807b381e0df990bebaed66426cb809
SHA1 4cc638a53d30a67f02a77c7b946fdef950e466c2
SHA512 44ff2fedd105804e447ef74ddb7828487d9a3c022782b03e9cedf0a5147ac9af76fa4bbcfa77bd2d4817d3fb295b30de9c3a356e0337bd0594c0c4709dc72e8f
SSDEEP 6144:T0h3aTaNsfI+gn8MUL/LykkROI7N4hHvom:2MWsfI/lU/kvMvo
TLSH
T1494449327A84D97BD881137664FC77A91D98E0A52F1C03C3E2DC4E699E57AF20634277
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

262144

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

D:\shigongl_p4_desktop\HTE\QDART\QDART_MFG\QSimManager\Release\QSimManager.pdb

kernel32

CancelIo ReadFile WriteFile GetLastError ResetEvent WaitForSingleObject SetEvent GetCurrentProcess CreateFileA WideCharToMultiByte MultiByteToWideChar ReleaseMutex CreateEventA CreateMutexA GetLocalTime TerminateProcess LocalFree LocalAlloc lstrlenA FormatMessageA InterlockedDecrement InterlockedIncrement GetOverlappedResult EnterCriticalSection InitializeCriticalSection DeleteCriticalSection lstrcmpiA OutputDebugStringA GetComputerNameA GetCurrentProcessId lstrcpyA PurgeComm ClearCommError SetCommState GetCommState EscapeCommFunction SetCommTimeouts GetCommTimeouts GetCommProperties SetupComm IsProcessorFeaturePresent GetSystemTimeAsFileTime GetCurrentThreadId QueryPerformanceCounter IsDebuggerPresent SetUnhandledExceptionFilter UnhandledExceptionFilter HeapSetInformation InterlockedCompareExchange InterlockedExchange DecodePointer CloseHandle Sleep LeaveCriticalSection GetTickCount EncodePointer

user32

MsgWaitForMultipleObjectsEx TranslateMessage PeekMessageA MsgWaitForMultipleObjects DispatchMessageW GetMessageA GetMessageW IsWindowUnicode wsprintfA FindWindowA DispatchMessageA

ole32

CoTaskMemFree CoInitializeEx CoCreateGuid CoUninitialize CoCreateInstance OleRun

oleaut32

GetErrorInfo SysAllocString VariantClear SysFreeString SysStringLen

msvcp100

?endl@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@1@AAV21@@Z ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@J@Z ??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z ??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ ?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ ??_7?$basic_ios@DU?$char_traits@D@std@@@std@@6B@ ??_7ios_base@std@@6B@ ?_Ios_base_dtor@ios_base@std@@CAXPAV12@@Z ?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z ?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z ?uncaught_exception@std@@YA_NXZ ?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ ?_Xout_of_range@std@@YAXPBD@Z ?_Xlength_error@std@@YAXPBD@Z ?cin@std@@3V?$basic_istream@DU?$char_traits@D@std@@@1@A ?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QAE_N_N@Z ?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z ?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ ?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ ?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ ?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDD@Z ??1_Container_base12@std@@QAE@XZ ??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ ?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ ?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ ?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ ?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ ?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z ?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z ?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z ?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ ?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z ?_BADOFF@std@@3_JB ??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ ??_7?$basic_ostream@DU?$char_traits@D@std@@@std@@6B@ ?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ

msvcr100

_controlfp_s _invoke_watson ?_type_info_dtor_internal_method@type_info@@QAEXXZ _except_handler4_common _crt_debugger_hook ?terminate@@YAXXZ __set_app_type _fmode _commode __setusermatherr _configthreadlocale _initterm_e _initterm __initenv exit _XcptFilter _exit _cexit __getmainargs _amsg_exit printf toupper ??3@YAXPAX@Z memmove ??0exception@std@@QAE@ABV01@@Z ?what@exception@std@@UBEPBDXZ ??1exception@std@@UAE@XZ ??0exception@std@@QAE@ABQBD@Z ??2@YAPAXI@Z strtok atoi memchr _time64 rand srand ??_V@YAXPAX@Z memcpy _purecall free malloc memset _CxxThrowException __CxxFrameHandler3 vsprintf fclose fopen sscanf sprintf strcpy_s fgets feof _getch fwrite fprintf fflush _strtime _strdate sprintf_s _beginthread _CIlog10 _CIpow _strlwr _stricmp _unlock __dllonexit _lock _onexit

Name

.text

Size

131KB

Virtual Size

130KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

72KB

Virtual Size

71KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

11KB

Virtual Size

11KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

512B

Virtual Size

436B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

28KB

Virtual Size

28KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

Ƚ�ʣu�

Size

16KB

Virtual Size

20KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-08_74807b381e0df990bebaed66426cb809_elex_smoke-loader_wapomi

kernel32

user32

ole32

oleaut32

msvcp100

msvcr100

generic