2026-07-21_b5437e1486433aac15b63e2272f26b1e_amadey_elex_smoke-loader_stop

General

Target
2026-07-21_b5437e1486433aac15b63e2272f26b1e_amadey_elex_smoke-loader_stop
Size 347KB
Sample260721-bldbrabs2m
SHA256 96bddc6deefc716a6f336da288dbeafa4c9de240aad16cb997319cf4bc96a408
MD5 b5437e1486433aac15b63e2272f26b1e
SHA1 e4dac16bb43d61eff8065689ed720f14193c2632
SHA512 cdcc7e0442094e2f2f9c740d638c8d4583a4d18475e9ab042a658546bccd2cf082ab2372e17ad1355587f8642551dd9fb439005ed86eb3a7ba06faca20044114
SSDEEP 6144:Jbfd39r9DtFNrS9T/yUwNkElLtK9TkwJ/OIkUT957VXabb4RuwZ2c6:zNrS91waEo9P/57pk4G
TLSH
T195748C13A3A5CBF5E4510170274A9FF550BB3831AA65A8973F602F6E2820EED8D77353
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-21_b5437e1486433aac15b63e2272f26b1e_amadey_elex_smoke-loader_stop

File Explorer

2026-07-21_b5437e1486433aac15b63e2272f26b1e_amadey_elex_smoke-loader_stop

.exe 347KB

2026-07-21_b5437e1486433aac15b63e2272f26b1e_amadey_elex_smoke-loader_stop

IMPHASH 4ceb18ef1b0fd83616268f2c4fd81646
SHA256 96bddc6deefc716a6f336da288dbeafa4c9de240aad16cb997319cf4bc96a408
MD5 b5437e1486433aac15b63e2272f26b1e
SHA1 e4dac16bb43d61eff8065689ed720f14193c2632
SHA512 cdcc7e0442094e2f2f9c740d638c8d4583a4d18475e9ab042a658546bccd2cf082ab2372e17ad1355587f8642551dd9fb439005ed86eb3a7ba06faca20044114
SSDEEP 6144:Jbfd39r9DtFNrS9T/yUwNkElLtK9TkwJ/OIkUT957VXabb4RuwZ2c6:zNrS91waEo9P/57pk4G
TLSH
T195748C13A3A5CBF5E4510170274A9FF550BB3831AA65A8973F602F6E2820EED8D77353
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

83900

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

user32

IsWindowUnicode DeferWindowPos IsCharAlphaW GetLastActivePopup GetClassLongA GetCursorPos GetWindowWord IsZoomed CountClipboardFormats GetAsyncKeyState RealChildWindowFromPoint EndDeferWindowPos MapVirtualKeyExW GetCaretBlinkTime

gdi32

OffsetRgn GdiTransparentBlt SetTextAlign SetBitmapBits GetPaletteEntries CheckColorsInGamut GetSystemPaletteUse GetBitmapBits PolyBezier ColorCorrectPalette SetBoundsRect RemoveFontResourceExA AnimatePalette SetWindowOrgEx SetRectRgn GetDeviceGammaRamp GetPixelFormat EnumICMProfilesA SelectClipRgn ResizePalette GetCharABCWidthsFloatA GetCharWidthI PolyDraw GetPolyFillMode

kernel32

HeapSize FlushFileBuffers ReadFile SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW CloseHandle CreateFileA IsDebuggerPresent GetCurrentProcess GetCommandLineA ResetEvent CreateNamedPipeW EncodePointer GetProcessAffinityMask TransmitCommChar GlobalDeleteAtom SetPriorityClass GetLastError HeapReAlloc HeapAlloc HeapFree GetVersionExA GetProcessHeap GetStartupInfoA DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapDestroy HeapCreate VirtualFree VirtualAlloc TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter GetProcAddress GetModuleHandleA ExitProcess WriteFile GetStdHandle GetModuleFileNameA SetHandleCount GetFileType FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime InitializeCriticalSection Sleep RtlUnwind GetCPInfo GetACP GetOEMCP LoadLibraryA MultiByteToWideChar SetFilePointer GetConsoleCP GetConsoleMode LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA

Name

.text

Size

125KB

Virtual Size

124KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

11KB

Virtual Size

10KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

24KB

Virtual Size

147KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.sdcx

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.ewfdas

Size

15KB

Virtual Size

14KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

169KB

Virtual Size

168KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-21_b5437e1486433aac15b63e2272f26b1e_amadey_elex_smoke-loader_stop

user32

gdi32

kernel32

generic