2026-07-20_3937d242a368c0a2f18a323bd7c7b622_elex_smoke-loader_wapomi

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-20_3937d242a368c0a2f18a323bd7c7b622_elex_smoke-loader_wapomi
Size 1.2MB
Sample260720-th885afw7q
SHA256 f709888bd946c43571c6c9eb7be93e6d9769bb8ad0a92d2c0131457105aa8fc0
MD5 3937d242a368c0a2f18a323bd7c7b622
SHA1 39c36dfdfc3e83f55827c8fe2e4bc6b550090685
SHA512 56cfb6a89c4cc8378b758560c61a42adf8a9526c94e4058815391eb970ca3188f75769b886649199e9cb1cac2a99680587140198d2bc234bb2c43888c5e96d2e
SSDEEP 24576:TziPmQSuASFmKm/WYs6F/JH3fCZTkQIN2Dm4TDc48IhlYgmclZb3:jun6BJIkQ9a4d9VpZT
TLSH
T1FA454ACF9AE3B0B6DF470476109AB3BAFF3116068410CCA7D6D48D225ED7922945FA2D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-20_3937d242a368c0a2f18a323bd7c7b622_elex_smoke-loader_wapomi

File Explorer

2026-07-20_3937d242a368c0a2f18a323bd7c7b622_elex_smoke-loader_wapomi

.exe 1.2MB

2026-07-20_3937d242a368c0a2f18a323bd7c7b622_elex_smoke-loader_wapomi

IMPHASH 0a8b00acc847ddbed9eaeda81cbff153
SHA256 f709888bd946c43571c6c9eb7be93e6d9769bb8ad0a92d2c0131457105aa8fc0
MD5 3937d242a368c0a2f18a323bd7c7b622
SHA1 39c36dfdfc3e83f55827c8fe2e4bc6b550090685
SHA512 56cfb6a89c4cc8378b758560c61a42adf8a9526c94e4058815391eb970ca3188f75769b886649199e9cb1cac2a99680587140198d2bc234bb2c43888c5e96d2e
SSDEEP 24576:TziPmQSuASFmKm/WYs6F/JH3fCZTkQIN2Dm4TDc48IhlYgmclZb3:jun6BJIkQ9a4d9VpZT
TLSH
T1FA454ACF9AE3B0B6DF470476109AB3BAFF3116068410CCA7D6D48D225ED7922945FA2D
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

1224704

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

kernel32

AreFileApisANSI CloseHandle CreateFileA CreateFileMappingA CreateFileMappingW CreateFileW CreateMutexW DebugBreak DeleteCriticalSection DeleteFileA DeleteFileW EnterCriticalSection FindClose FindFirstFileW FlushFileBuffers FlushViewOfFile FormatMessageA FormatMessageW FreeLibrary GetConsoleScreenBufferInfo GetCurrentProcess GetCurrentProcessId GetCurrentThreadId GetDiskFreeSpaceA GetDiskFreeSpaceW GetFileAttributesA GetFileAttributesExW GetFileAttributesW GetFileSize GetFullPathNameA GetFullPathNameW GetLastError GetProcAddress GetProcessHeap GetStartupInfoA GetStdHandle GetSystemInfo GetSystemTime GetSystemTimeAsFileTime GetTempPathA GetTempPathW GetTickCount GetVersionExA GetVersionExW HeapAlloc HeapCompact HeapCreate HeapDestroy HeapFree HeapReAlloc HeapSize HeapValidate InitializeCriticalSection LeaveCriticalSection LoadLibraryA LocalFree LockFile LockFileEx MapViewOfFile MultiByteToWideChar OutputDebugStringA OutputDebugStringW QueryPerformanceCounter ReadFile SetConsoleCtrlHandler SetConsoleTextAttribute SetCurrentDirectoryW SetEndOfFile SetFilePointer SetFileTime SetUnhandledExceptionFilter Sleep SystemTimeToFileTime TerminateProcess TlsGetValue TryEnterCriticalSection UnhandledExceptionFilter UnlockFile UnlockFileEx UnmapViewOfFile VirtualProtect VirtualQuery WaitForSingleObject WaitForSingleObjectEx WideCharToMultiByte WriteFile

api-ms-win-crt-heap-l1-1-0

calloc free malloc realloc

api-ms-win-crt-locale-l1-1-0

localeconv __initialize_lconv_for_unsigned_char

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-private-l1-1-0

memcmp memcpy memmove strchr strrchr strstr

api-ms-win-crt-runtime-l1-1-0

_set_app_type __p___argc __p___argv __p___wargv __p__acmdln _cexit _configure_narrow_argv _configure_wide_argv _crt_atexit _errno _initialize_narrow_environment _initialize_wide_environment _initterm _set_invalid_parameter_handler abort exit signal strerror system _getpid

api-ms-win-crt-stdio-l1-1-0

__acrt_iob_func __p__fmode __stdio_common_vfprintf __stdio_common_vfwprintf _fileno _isatty _pclose _popen fclose fflush fgetc fgets fopen fputc fputs fread fseek ftell fwrite putchar puts rewind setvbuf _setmode

api-ms-win-crt-string-l1-1-0

isalnum isalpha isprint isspace memset strcmp strcpy strcspn strlen strncmp strncpy tolower wcslen _strdup

api-ms-win-crt-convert-l1-1-0

atoi mbrtowc strtol wcrtomb

api-ms-win-crt-time-l1-1-0

__daylight __timezone __tzname _localtime32 _tzset

api-ms-win-crt-environment-l1-1-0

__p__environ __p__wenviron getenv

api-ms-win-crt-utility-l1-1-0

qsort

api-ms-win-crt-filesystem-l1-1-0

_chmod _findclose _findfirst32 _findnext32 _fullpath _lock_file _mkdir _stat32i64 _unlock_file _wunlink _unlink _access

Name

.text

Size

1.0MB

Virtual Size

1.0MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

100KB

Virtual Size

99KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.buildid

Size

512B

Virtual Size

53B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

6KB

Virtual Size

10KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

43KB

Virtual Size

42KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

�$70�u

Size

16KB

Virtual Size

20KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-20_3937d242a368c0a2f18a323bd7c7b622_elex_smoke-loader_wapomi

kernel32

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-private-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-time-l1-1-0

api-ms-win-crt-environment-l1-1-0

api-ms-win-crt-utility-l1-1-0

api-ms-win-crt-filesystem-l1-1-0

generic