2026-08-03_c8dd2456751b50f7a875b740fdd1cc01_amadey_elex_hellokitty_smoke-loader

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-03_c8dd2456751b50f7a875b740fdd1cc01_amadey_elex_hellokitty_smoke-loader
Size 227KB
Sample260803-cm4e1az1cz
SHA256 b68b9c07b3621fc486ddc6c152712f3c36e4904b3bd33eb47f475aaf02fb7e0c
MD5 c8dd2456751b50f7a875b740fdd1cc01
SHA1 01c6723d739874b57463464df5fbd8a8d5e12c9f
SHA512 3e0634914ccaf58680dc665eb7c7de6e858ca308c1bde51d366fdcc73e6759f2e4ba192cd745fc585b8d06a534e487d75e8f686fc483931a073de8c2b26c2f2a
SSDEEP 3072:cX4pzOE1plyIukeXz5u06ZQBXnHtcxO+KLxE/21R:pO4KtkG5uLGtcxU9R
TLSH
T1AA347C3075C08932D9761A345134C6BCAD3EFB600F254EBF678812FE9EA21D0A279977
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-03_c8dd2456751b50f7a875b740fdd1cc01_amadey_elex_hellokitty_smoke-loader

File Explorer

2026-08-03_c8dd2456751b50f7a875b740fdd1cc01_amadey_elex_hellokitty_smoke-loader

.exe 227KB

2026-08-03_c8dd2456751b50f7a875b740fdd1cc01_amadey_elex_hellokitty_smoke-loader

IMPHASH 9374d1eaf80435f290dc0faf5ba2dbe1
SHA256 b68b9c07b3621fc486ddc6c152712f3c36e4904b3bd33eb47f475aaf02fb7e0c
MD5 c8dd2456751b50f7a875b740fdd1cc01
SHA1 01c6723d739874b57463464df5fbd8a8d5e12c9f
SHA512 3e0634914ccaf58680dc665eb7c7de6e858ca308c1bde51d366fdcc73e6759f2e4ba192cd745fc585b8d06a534e487d75e8f686fc483931a073de8c2b26c2f2a
SSDEEP 3072:cX4pzOE1plyIukeXz5u06ZQBXnHtcxO+KLxE/21R:pO4KtkG5uLGtcxU9R
TLSH
T1AA347C3075C08932D9761A345134C6BCAD3EFB600F254EBF678812FE9EA21D0A279977
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

4839

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

aslib

MEDV IOTYX A23A1 A3A1 DECOD EDFILL EDMM_M EDMNTH EDORDR TPDIV MPYVP

clibwin

CLEAR_EXEC_ERREXIT OMLOG IOTY EXEC SWRA1 VAXEXEC GET_EXEC_ERREXIT WAIT ZPL_DGETCMDLINE IOTYY ZPL_DCREPRC ZPL_DGETENV EXITST GET_MEMORY SWA1F zinitc

kernel32

TlsFree WriteConsoleW CloseHandle CreateFileW SetFilePointerEx GetConsoleMode GetConsoleCP FlushFileBuffers HeapReAlloc HeapSize GetProcessHeap LCMapStringW CompareStringW GetStringTypeW GetFileType SetStdHandle SetEnvironmentVariableW FreeEnvironmentStringsW QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW IsProcessorFeaturePresent GetModuleHandleW GetCurrentProcess TerminateProcess GetEnvironmentStringsW WideCharToMultiByte RtlUnwind GetLastError SetLastError EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue DecodePointer FreeLibrary GetProcAddress LoadLibraryExW RaiseException GetStdHandle WriteFile GetModuleFileNameW ExitProcess GetModuleHandleExW GetCommandLineA GetCommandLineW HeapAlloc HeapFree FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo MultiByteToWideChar

Name

.text

Size

48KB

Virtual Size

47KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

Z_TEXT

Size

38KB

Virtual Size

38KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

string_T

Size

512B

Virtual Size

284B

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

zinit_TE

Size

512B

Virtual Size

118B

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

_IDIV_TE

Size

512B

Virtual Size

106B

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

bitops_T

Size

512B

Virtual Size

345B

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

divds_TE

Size

512B

Virtual Size

13B

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

23KB

Virtual Size

22KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

2KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

_ZDATA

Size

102KB

Virtual Size

101KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1024B

Virtual Size

760B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

9KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-03_c8dd2456751b50f7a875b740fdd1cc01_amadey_elex_hellokitty_smoke-loader

aslib

clibwin

kernel32

generic