2026-07-16_57ab4d5f8ea7cd286a9983ddd702d105_amadey_elex_smoke-loader_stop

General

Target
2026-07-16_57ab4d5f8ea7cd286a9983ddd702d105_amadey_elex_smoke-loader_stop
Size 1.5MB
Sample260716-nylvwab15l
SHA256 9e44ab7f0f68d8b01b70b52159432174a725894de98a46a34e43e5adac48c912
MD5 57ab4d5f8ea7cd286a9983ddd702d105
SHA1 a61ce59517f04f7ec22c5718413e04910eb08dc2
SHA512 57025d1cf7300866895cdf740518777c8b3bd949dd50999c31156ec5ba2410f09efb3201ff8bf0b35f18103bff7267653467000e12c352a3d64fc276cedaf49f
SSDEEP 24576:rXMWjIbFMZs4YnQ/tbw/2Mkjy6Fr7g0oT:b7IWKQ/lFTjN4
TLSH
T1576501217AD1C437FA7302758CE987BA5B6ABC522F3542CB37C8071D5E352E28A36752
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-16_57ab4d5f8ea7cd286a9983ddd702d105_amadey_elex_smoke-loader_stop

File Explorer

2026-07-16_57ab4d5f8ea7cd286a9983ddd702d105_amadey_elex_smoke-loader_stop

.exe 1.5MB

2026-07-16_57ab4d5f8ea7cd286a9983ddd702d105_amadey_elex_smoke-loader_stop

IMPHASH 016ea4aa268550ac40dc1d9e83323750
SHA256 9e44ab7f0f68d8b01b70b52159432174a725894de98a46a34e43e5adac48c912
MD5 57ab4d5f8ea7cd286a9983ddd702d105
SHA1 a61ce59517f04f7ec22c5718413e04910eb08dc2
SHA512 57025d1cf7300866895cdf740518777c8b3bd949dd50999c31156ec5ba2410f09efb3201ff8bf0b35f18103bff7267653467000e12c352a3d64fc276cedaf49f
SSDEEP 24576:rXMWjIbFMZs4YnQ/tbw/2Mkjy6Fr7g0oT:b7IWKQ/lFTjN4
TLSH
T1576501217AD1C437FA7302758CE987BA5B6ABC522F3542CB37C8071D5E352E28A36752
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

91807

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

FindNextFileW DeleteFileW GetTickCount GetLongPathNameW GetTempPathW GetCommandLineW WaitForSingleObject RemoveDirectoryW GetFileAttributesW LoadLibraryExW GetSystemDirectoryW SetErrorMode CreateFileA ReadFile SetFilePointer GetLastError FormatMessageW ExitProcess CreateFileW CloseHandle LocalFree CreateProcessW GetSystemTime WriteFile GetModuleFileNameW GetVersionExW CopyFileW GetVersion GetProcAddress FreeLibrary InterlockedExchange LoadLibraryA RaiseException VirtualAlloc VirtualFree FileTimeToSystemTime FileTimeToLocalFileTime GetFullPathNameW GetLocalTime GetWindowsDirectoryW GetCurrentDirectoryW GetEnvironmentVariableW GetModuleHandleA GlobalMemoryStatus WideCharToMultiByte GetDriveTypeW HeapFree GetVersionExA HeapAlloc GetProcessHeap GetStartupInfoW RtlUnwind GetFileType TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetStdHandle GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineA SetHandleCount GetStartupInfoA DeleteCriticalSection TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement HeapDestroy HeapCreate QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime SetStdHandle EnterCriticalSection LeaveCriticalSection Sleep GetConsoleCP GetConsoleMode SetEndOfFile GetCPInfo GetACP GetOEMCP HeapSize HeapReAlloc LCMapStringA LCMapStringW InitializeCriticalSection WriteConsoleA GetConsoleOutputCP WriteConsoleW GetStringTypeA GetStringTypeW GetLocaleInfoA FlushFileBuffers GlobalAlloc GlobalLock GlobalHandle GlobalUnlock GlobalFree CreateDirectoryW GetVolumeInformationW LocalAlloc DosDateTimeToFileTime LocalFileTimeToFileTime SetFileTime SetCurrentDirectoryW FindFirstFileW MultiByteToWideChar FindClose

gdi32

SetTextColor SetTextAlign GetBkColor GetTextExtentPoint32W ExtTextOutW CreateDCW GetDeviceCaps CreateFontIndirectW DeleteDC SelectObject DeleteObject SetBkColor

advapi32

RegQueryValueW

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-16_57ab4d5f8ea7cd286a9983ddd702d105_amadey_elex_smoke-loader_stop

kernel32

gdi32

advapi32

generic