2026-08-02_7abb6d123ffe0f891a1d04f4308c3600_amadey_elex_remcos_smoke-loader

General

Target
2026-08-02_7abb6d123ffe0f891a1d04f4308c3600_amadey_elex_remcos_smoke-loader
Size 351KB
Sample260802-dgkldashlf
SHA256 84434fc074284be1b7ed501896bbb5603add59a4cc3e6c105d12d0ec74c84393
MD5 7abb6d123ffe0f891a1d04f4308c3600
SHA1 c41f5471fee36078055c5e566f14f904f679212a
SHA512 4edb0e3b8c4f2829f62a50db9e565ec55b7391b376a1c77debe994afec046236d5a50bdaf56feb140dc33502d77422c377f3b3dd9a01cba4934abab410548e96
SSDEEP 3072:9i8a55OE0sgL4u6/0i5o6SHfbR/PkOAg0FubwphT5pmexUhQobCvQnU+1WDi1et2:9ukhLX6/0sXSpXAO0nmeSQAW+Mg5AAV
TLSH
T10174AE11B9C2D4B2E1B225304A78DB61163DBE610E619F7B73D63F2E2E741C18931EB6
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-02_7abb6d123ffe0f891a1d04f4308c3600_amadey_elex_remcos_smoke-loader

2026-08-02_7abb6d123ffe0f891a1d04f4308c3600_amadey_elex_remcos_smoke-loader

.exe 351KB

SHA256 84434fc074284be1b7ed501896bbb5603add59a4cc3e6c105d12d0ec74c84393
MD5 7abb6d123ffe0f891a1d04f4308c3600
SHA1 c41f5471fee36078055c5e566f14f904f679212a
SHA512 4edb0e3b8c4f2829f62a50db9e565ec55b7391b376a1c77debe994afec046236d5a50bdaf56feb140dc33502d77422c377f3b3dd9a01cba4934abab410548e96
SSDEEP 3072:9i8a55OE0sgL4u6/0i5o6SHfbR/PkOAg0FubwphT5pmexUhQobCvQnU+1WDi1et2:9ukhLX6/0sXSpXAO0nmeSQAW+Mg5AAV
TLSH
T10174AE11B9C2D4B2E1B225304A78DB61163DBE610E619F7B73D63F2E2E741C18931EB6
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

6

Entry point

34859

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\Users\ana\code\Squirrel\Squirrel.Windows\src\StubExecutable\bin\Release\StubExecutable.pdb