2026-07-20_eef98b1f4e2d8fd990ac858b900e2851_elex_smoke-loader_wapomi

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-20_eef98b1f4e2d8fd990ac858b900e2851_elex_smoke-loader_wapomi
Size 57KB
Sample260720-ss2flagt2z
SHA256 df9768d08d70b30a5d27e7b290584d63991a30df74ba583e339bbb994b8edfa7
MD5 eef98b1f4e2d8fd990ac858b900e2851
SHA1 fa3316204fe2057a6e4359f19454999a25f81452
SHA512 b0682eb97ee4c40634c476e60f69ae12db0d6226bf49f938c6559c10bcb58ee262d24da0e0da47295975c52dbca5c20022d2fc6d60e530e43f8c7447a7a2b726
SSDEEP 1536:BlDvtgbHQ43AG55SmY2iZ+sEGCq2iW7z:Ht23BS701GCH
TLSH
T144437E4EDB9780F5D9DA21F080D6F7BB4A37EA138430DCBBD75CD8D49911B81A42E289
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-20_eef98b1f4e2d8fd990ac858b900e2851_elex_smoke-loader_wapomi

File Explorer

2026-07-20_eef98b1f4e2d8fd990ac858b900e2851_elex_smoke-loader_wapomi

.exe 57KB

2026-07-20_eef98b1f4e2d8fd990ac858b900e2851_elex_smoke-loader_wapomi

IMPHASH ecec47aba1e1cd83dd98c488da886b32
SHA256 df9768d08d70b30a5d27e7b290584d63991a30df74ba583e339bbb994b8edfa7
MD5 eef98b1f4e2d8fd990ac858b900e2851
SHA1 fa3316204fe2057a6e4359f19454999a25f81452
SHA512 b0682eb97ee4c40634c476e60f69ae12db0d6226bf49f938c6559c10bcb58ee262d24da0e0da47295975c52dbca5c20022d2fc6d60e530e43f8c7447a7a2b726
SSDEEP 1536:BlDvtgbHQ43AG55SmY2iZ+sEGCq2iW7z:Ht23BS701GCH
TLSH
T144437E4EDB9780F5D9DA21F080D6F7BB4A37EA138430DCBBD75CD8D49911B81A42E289
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

61440

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

kernel32

DeleteCriticalSection EnterCriticalSection GetCurrentProcess GetCurrentProcessId GetCurrentThreadId GetLastError GetStartupInfoA GetSystemTimeAsFileTime GetTickCount InitializeCriticalSection LeaveCriticalSection QueryPerformanceCounter SetUnhandledExceptionFilter Sleep TerminateProcess TlsGetValue UnhandledExceptionFilter VirtualProtect VirtualQuery

api-ms-win-crt-heap-l1-1-0

calloc free malloc realloc

api-ms-win-crt-locale-l1-1-0

localeconv __initialize_lconv_for_unsigned_char

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-private-l1-1-0

memcpy strchr

api-ms-win-crt-runtime-l1-1-0

_set_app_type __p___argc __p___argv __p___wargv __p__acmdln _cexit _configure_narrow_argv _configure_wide_argv _crt_atexit _errno _initialize_narrow_environment _initialize_wide_environment _initterm _set_invalid_parameter_handler abort exit signal strerror

api-ms-win-crt-stdio-l1-1-0

__acrt_iob_func __p__fmode __stdio_common_vfprintf __stdio_common_vfwprintf fclose feof ferror fopen fputc fread fwrite getc

api-ms-win-crt-string-l1-1-0

strcmp strlen strncmp wcslen

api-ms-win-crt-convert-l1-1-0

mbrtowc wcrtomb

api-ms-win-crt-time-l1-1-0

__daylight __timezone __tzname _tzset

api-ms-win-crt-environment-l1-1-0

__p__environ __p__wenviron getenv

api-ms-win-crt-filesystem-l1-1-0

_lock_file _unlock_file

Name

.text

Size

29KB

Virtual Size

29KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

7KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.buildid

Size

512B

Virtual Size

53B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

% �4�up

Size

16KB

Virtual Size

20KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-20_eef98b1f4e2d8fd990ac858b900e2851_elex_smoke-loader_wapomi

kernel32

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-private-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-time-l1-1-0

api-ms-win-crt-environment-l1-1-0

api-ms-win-crt-filesystem-l1-1-0

generic