2026-07-20_7f1a4256f8eca56d1ae380681de3640d_amadey_elex_smoke-loader

General

Target
2026-07-20_7f1a4256f8eca56d1ae380681de3640d_amadey_elex_smoke-loader
Size 11.9MB
Sample260720-s8gfcsgz4x
SHA256 0d7072980d7c7e2013ec333dd0d04bc5210ae3486d515a546e0e0bc83525a54c
MD5 7f1a4256f8eca56d1ae380681de3640d
SHA1 7f257a9b958ae6adcf9340ba6225fccb79f31f09
SHA512 2e9c0cfb7a52972d79c55e9a7b77f9b47d46cd3ddf805d0961733c25339f5a9fb4662449de57906831fa7bde5bf22bc7242864c6c326135b2c29abc85c836196
SSDEEP 196608:VkQjK9ECj7AZEqv/Byci3QBTveqw34aG11xGgZVsqiuzNtGNP1ZdkqFpuJLY9RI:V4ZjcZEqv/kci3kBH1PGOCqff8LnFkJN
TLSH
T1F8C601D07B99FA18E78E21B0482036B5C76265307760E7A8FE8B35C25C196CBDDE1E35
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-20_7f1a4256f8eca56d1ae380681de3640d_amadey_elex_smoke-loader

File Explorer

2026-07-20_7f1a4256f8eca56d1ae380681de3640d_amadey_elex_smoke-loader

.exe 11.9MB

2026-07-20_7f1a4256f8eca56d1ae380681de3640d_amadey_elex_smoke-loader

IMPHASH c204f9a07cad1cdc5027ee5e3efe226a
SHA256 0d7072980d7c7e2013ec333dd0d04bc5210ae3486d515a546e0e0bc83525a54c
MD5 7f1a4256f8eca56d1ae380681de3640d
SHA1 7f257a9b958ae6adcf9340ba6225fccb79f31f09
SHA512 2e9c0cfb7a52972d79c55e9a7b77f9b47d46cd3ddf805d0961733c25339f5a9fb4662449de57906831fa7bde5bf22bc7242864c6c326135b2c29abc85c836196
SSDEEP 196608:VkQjK9ECj7AZEqv/Byci3QBTveqw34aG11xGgZVsqiuzNtGNP1ZdkqFpuJLY9RI:V4ZjcZEqv/kci3kBH1PGOCqff8LnFkJN
TLSH
T1F8C601D07B99FA18E78E21B0482036B5C76265307760E7A8FE8B35C25C196CBDDE1E35
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

4096

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryA GetProcAddress IsBadReadPtr VirtualFree VirtualAlloc GetVersion IsProcessorFeaturePresent GetSystemDirectoryW GetModuleHandleA LoadLibraryExW EnterCriticalSection LeaveCriticalSection DeleteCriticalSection ReleaseSemaphore InitializeCriticalSection WaitForSingleObject GetLastError SetEvent CloseHandle ResetEvent CreateSemaphoreA CreateEventA AreFileApisANSI MultiByteToWideChar WideCharToMultiByte GetModuleFileNameA GetModuleFileNameW LoadLibraryW FreeLibrary FormatMessageW LocalFree FormatMessageA CreateDirectoryW SetLastError RemoveDirectoryW SetFileTime GetTempPathW CreateFileW GetCurrentThreadId GetCurrentDirectoryA SetCurrentDirectoryA SetFileAttributesW GetTempPathA DeleteFileA DeleteFileW SetFileAttributesA GetCurrentDirectoryW SetCurrentDirectoryW RemoveDirectoryA GetCurrentProcessId CreateDirectoryA GetTickCount FindFirstFileW FindFirstFileA FindNextFileW GetStdHandle FindNextFileA FindClose GetFileAttributesW GetFileInformationByHandle GetFileAttributesA ReadFile WriteFile SetFilePointer SetEndOfFile CreateFileA GetFileSize GetCurrentProcess GetProcessAffinityMask GetSystemInfo GlobalMemoryStatus GetSystemTimeAsFileTime QueryPerformanceCounter Sleep GetVersionExA GetModuleHandleW CreateProcessA SetFilePointerEx GetConsoleMode GetConsoleOutputCP FlushFileBuffers HeapSize WriteConsoleW SetStdHandle GetFileType GetProcessHeap FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW GetCommandLineA GetOEMCP GetACP IsValidCodePage FindFirstFileExW EnumSystemLocalesW GetUserDefaultLCID IsValidLocale GetLocaleInfoW LCMapStringW HeapAlloc HeapFree HeapReAlloc ExitProcess GetModuleHandleExW FreeLibraryAndExitThread ExitThread CreateThread TlsFree TlsSetValue TlsGetValue TlsAlloc InitializeCriticalSectionAndSpinCount RaiseException UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess IsDebuggerPresent GetStartupInfoW InitializeSListHead GetStringTypeW InitializeCriticalSectionEx EncodePointer DecodePointer LCMapStringEx GetCPInfo RtlUnwind

user32

DestroyWindow PostMessageA EndDialog SetTimer SendMessageA LoadIconA KillTimer MessageBoxW SetWindowTextW SetWindowTextA LoadStringA LoadStringW DialogBoxParamA ShowWindow SetWindowLongA GetWindowLongA GetDlgItem DialogBoxParamW CharUpperW CharUpperA

oleaut32

SysAllocStringLen VariantClear SysStringLen

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-20_7f1a4256f8eca56d1ae380681de3640d_amadey_elex_smoke-loader

kernel32

user32

oleaut32

generic