2026-07-23_46bdf95ba77d41f988835e71989672d0_amadey_elex_smoke-loader

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-23_46bdf95ba77d41f988835e71989672d0_amadey_elex_smoke-loader
Size 7.7MB
Sample260723-bqb99ayfje
SHA256 3281da1304ea1a9b91b303da690bb32d9aef50a081251225effd5d0c3b187a32
MD5 46bdf95ba77d41f988835e71989672d0
SHA1 c6a85dba6050c05d942914558c77544cdd34135e
SHA512 e2113c622bd130d1b673c37568e55e11bd7ce4d405d291d92a99f669d10134f4a86d018a51f535d6e9fcf76210ac5ad095740a4cbb792d429d1c3ed74a764ba4
SSDEEP 196608:89qHpuez/W2nOgBdOWeAKaoHiIu0MGKt4:8QDz++BNWJu1Gy4
TLSH
T1CA863322B297C8B6C9052279CEC67F7F6874EC4556A086CBF748B28174B0CEF859B171
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-23_46bdf95ba77d41f988835e71989672d0_amadey_elex_smoke-loader

File Explorer

2026-07-23_46bdf95ba77d41f988835e71989672d0_amadey_elex_smoke-loader

.exe 7.7MB

2026-07-23_46bdf95ba77d41f988835e71989672d0_amadey_elex_smoke-loader

IMPHASH c87b01909c46efd4255d38351d04048b
SHA256 3281da1304ea1a9b91b303da690bb32d9aef50a081251225effd5d0c3b187a32
MD5 46bdf95ba77d41f988835e71989672d0
SHA1 c6a85dba6050c05d942914558c77544cdd34135e
SHA512 e2113c622bd130d1b673c37568e55e11bd7ce4d405d291d92a99f669d10134f4a86d018a51f535d6e9fcf76210ac5ad095740a4cbb792d429d1c3ed74a764ba4
SSDEEP 196608:89qHpuez/W2nOgBdOWeAKaoHiIu0MGKt4:8QDz++BNWJu1Gy4
TLSH
T1CA863322B297C8B6C9052279CEC67F7F6874EC4556A086CBF748B28174B0CEF859B171
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

97783

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

comctl32

ord17

version

GetFileVersionInfoSizeA GetFileVersionInfoA VerQueryValueA

kernel32

GetProcAddress CopyFileA LoadLibraryA GetDiskFreeSpaceA GetModuleFileNameA GetModuleHandleA LocalFree SetEnvironmentVariableA CompareStringW CompareStringA GetLastError IsBadReadPtr FlushFileBuffers GetOEMCP GetACP GetStringTypeW GetStringTypeA VirtualQuery GetSystemInfo MultiByteToWideChar MulDiv GetExitCodeProcess Sleep GetWindowsDirectoryA FreeLibrary GetSystemDirectoryA WideCharToMultiByte LocalFileTimeToFileTime CloseHandle SetFileTime SetFileAttributesA CreateFileA DosDateTimeToFileTime CreateDirectoryA RemoveDirectoryA IsBadCodePtr VirtualProtect GetCPInfo GetLocaleInfoA InitializeCriticalSection GetSystemTimeAsFileTime GetCurrentProcessId GetTickCount QueryPerformanceCounter SetUnhandledExceptionFilter GetEnvironmentStringsW FreeEnvironmentStringsW GetEnvironmentStrings FreeEnvironmentStringsA FindClose FindFirstFileA FindNextFileA DeleteFileA HeapFree GetFileType HeapAlloc ReadFile SetFilePointer WriteFile ExitThread TlsSetValue TlsGetValue ResumeThread CreateThread ExitProcess TerminateProcess GetCurrentProcess GetStartupInfoA GetCommandLineA GetVersionExA RaiseException RtlUnwind HeapReAlloc HeapDestroy HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection VirtualAlloc IsBadWritePtr SetEndOfFile SetHandleCount GetStdHandle SetStdHandle HeapSize LCMapStringA LCMapStringW TlsFree SetLastError GetCurrentThreadId TlsAlloc GetFileAttributesA UnhandledExceptionFilter

user32

DialogBoxParamA GetWindowTextA LoadImageA EndPaint SetTimer FillRect GetClientRect SendMessageA SetWindowTextA GetDC BeginPaint MessageBoxA ReleaseDC GetDlgItem EndDialog GetDesktopWindow EnumChildWindows GetSysColorBrush IsDlgButtonChecked

gdi32

SetTextColor DeleteDC CreateFontA GetDeviceCaps SetBkColor DeleteObject SelectObject CreateCompatibleDC GetObjectA CreateSolidBrush BitBlt

advapi32

RegSetValueExA RegCloseKey RegOpenKeyExA RegCreateKeyExA RegCreateKeyA RegQueryValueExA

shell32

SHGetPathFromIDListA ShellExecuteA ShellExecuteExA SHBrowseForFolderA SHGetMalloc

ole32

CoUninitialize CoCreateInstance CoInitialize

oleaut32

VariantInit VariantClear

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-23_46bdf95ba77d41f988835e71989672d0_amadey_elex_smoke-loader

comctl32

version

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

generic