2026-07-24_f412b8eaefdea4e226a80e21ce49bd5e_amadey_elex_smoke-loader

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-24_f412b8eaefdea4e226a80e21ce49bd5e_amadey_elex_smoke-loader
Size 712KB
Sample260724-kmrefavxfv
SHA256 08d952ec185eb655e725426c4fdaaaec9af9b7b2f4727b2d786c68989df4fcad
MD5 f412b8eaefdea4e226a80e21ce49bd5e
SHA1 bb3371a3a60c0094bc4b38beba8bc9b030e72fd3
SHA512 a963a59b84656a7ee285eb622aeb302d58fa89ac6b55ddfe3ea6228020c5d86cf16b93715dec4e921642c6505c6e1c9312ab97d3bad6b731bc852dbfe93dd313
SSDEEP 3072:99osQYgIMbzhqA53BvYOGdHliqY+LCvxZwxs4lBFNdFBy:8skI4z4A53FsF7Y+LYxlyNfB
TLSH
T1DBF47C11B2B19039C46A31B504E77B21AE756E0023354AD76B9C6F3E5F70AF05F3A3A6
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-24_f412b8eaefdea4e226a80e21ce49bd5e_amadey_elex_smoke-loader

File Explorer

2026-07-24_f412b8eaefdea4e226a80e21ce49bd5e_amadey_elex_smoke-loader

.exe 712KB

2026-07-24_f412b8eaefdea4e226a80e21ce49bd5e_amadey_elex_smoke-loader

IMPHASH 92c0ae304538036db532045993ff8568
SHA256 08d952ec185eb655e725426c4fdaaaec9af9b7b2f4727b2d786c68989df4fcad
MD5 f412b8eaefdea4e226a80e21ce49bd5e
SHA1 bb3371a3a60c0094bc4b38beba8bc9b030e72fd3
SHA512 a963a59b84656a7ee285eb622aeb302d58fa89ac6b55ddfe3ea6228020c5d86cf16b93715dec4e921642c6505c6e1c9312ab97d3bad6b731bc852dbfe93dd313
SSDEEP 3072:99osQYgIMbzhqA53BvYOGdHliqY+LCvxZwxs4lBFNdFBy:8skI4z4A53FsF7Y+LYxlyNfB
TLSH
T1DBF47C11B2B19039C46A31B504E77B21AE756E0023354AD76B9C6F3E5F70AF05F3A3A6
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

405129

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

d:\Work\AlienSky\Release_Demo\Atomaders.pdb

winmm

timeBeginPeriod timeEndPeriod timeGetTime

dinput

DirectInputCreateA

dsound

ord1

version

GetFileVersionInfoA VerQueryValueA GetFileVersionInfoSizeA

kernel32

SetLastError CreateMutexA ReleaseMutex GetTimeFormatA GetDateFormatA OutputDebugStringA WideCharToMultiByte MultiByteToWideChar CreateFileA GetVersionExA HeapFree GetModuleHandleA WriteFile IsProcessorFeaturePresent VirtualQuery InterlockedExchange InitializeCriticalSection HeapSize SetUnhandledExceptionFilter GetStringTypeW GetStringTypeA SetEndOfFile GetCurrentProcessId GetTickCount GetCPInfo GetEnvironmentStringsW FreeEnvironmentStringsW GetEnvironmentStrings FreeEnvironmentStringsA UnhandledExceptionFilter FlushFileBuffers GetFileType GetStdHandle SetHandleCount SetFilePointer ReadFile TlsGetValue TlsSetValue TlsFree GetCurrentThreadId TlsAlloc IsBadWritePtr VirtualAlloc VirtualFree HeapCreate HeapDestroy EnterCriticalSection GetACP LeaveCriticalSection DeleteCriticalSection RaiseException TerminateProcess ExitProcess RtlUnwind GetCommandLineA GetStartupInfoA HeapReAlloc HeapAlloc GetOEMCP SetStdHandle GetEnvironmentVariableA GetModuleFileNameA Sleep CloseHandle GetCurrentThread GetCurrentProcess DuplicateHandle GetLastError GetCurrentDirectoryA GetSystemTime GetProcAddress LoadLibraryA FreeLibrary VirtualProtect GetSystemInfo QueryPerformanceCounter LCMapStringA GetSystemTimeAsFileTime GetLocaleInfoA LCMapStringW IsBadReadPtr IsBadCodePtr

user32

GetKeyState SetWindowLongA RegisterClassA LoadCursorA WaitMessage DispatchMessageA TranslateMessage GetMessageA SendMessageA FindWindowA GetDlgItem DialogBoxParamA MessageBoxA EndDialog SetWindowTextA MoveWindow GetWindowRect DefWindowProcA GetWindowLongA CreateWindowExA PostQuitMessage wsprintfA DestroyWindow DestroyMenu IntersectRect GetSystemMetrics PtInRect OffsetRect DestroyIcon ScreenToClient GetCursorPos SetCursorPos ShowCursor ShowWindow SetClassLongA LoadIconA PeekMessageA

gdi32

GetStockObject DeleteObject CreatePen

advapi32

RegQueryValueExA RegSetValueExA RegFlushKey RegCloseKey RegOpenKeyExA RegCreateKeyExA RegOpenKeyA

shell32

ShellExecuteA

ole32

CoUninitialize CoCreateInstance CoInitialize

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-24_f412b8eaefdea4e226a80e21ce49bd5e_amadey_elex_smoke-loader

winmm

dinput

dsound

version

kernel32

user32

gdi32

advapi32

shell32

ole32

generic