2026-08-03_dfa7784917e082cc016d8c5f2f60aef3_amadey_elex_smoke-loader

General

Target
2026-08-03_dfa7784917e082cc016d8c5f2f60aef3_amadey_elex_smoke-loader
Size 3.1MB
Sample260803-fb76laydqd
SHA256 f19b575572b0be565f82cc63e111f94101cc7e5ab418db7da4fbaefa69817818
MD5 dfa7784917e082cc016d8c5f2f60aef3
SHA1 1d1d808e8443b556406a7983401a402ec6dd8b1b
SHA512 3920ce767c85c3391505c89ce539bfd1e881e29c35419d7247d166059cc556cc6e61c4a2deef949f8685a8bba08710da300fd9b92e39cfbad539e8effeac1ef7
SSDEEP 49152:ck7cmFdogWOq/5UvmwXZ7maIfiCWheOOAIesBam2EQf/mh96qjdtEkr9Sj6D6e:ck7cmd+/U6RixheOafQ2xjdtFSjYp
TLSH
T1FDE52350D698C3F2C04038F55A02C7EB5E793E381762EEC73ADA3B68AD256C35632657
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-03_dfa7784917e082cc016d8c5f2f60aef3_amadey_elex_smoke-loader

File Explorer

2026-08-03_dfa7784917e082cc016d8c5f2f60aef3_amadey_elex_smoke-loader

.exe 3.1MB

2026-08-03_dfa7784917e082cc016d8c5f2f60aef3_amadey_elex_smoke-loader

SHA256 f19b575572b0be565f82cc63e111f94101cc7e5ab418db7da4fbaefa69817818
MD5 dfa7784917e082cc016d8c5f2f60aef3
SHA1 1d1d808e8443b556406a7983401a402ec6dd8b1b
SHA512 3920ce767c85c3391505c89ce539bfd1e881e29c35419d7247d166059cc556cc6e61c4a2deef949f8685a8bba08710da300fd9b92e39cfbad539e8effeac1ef7
SSDEEP 49152:ck7cmFdogWOq/5UvmwXZ7maIfiCWheOOAIesBam2EQf/mh96qjdtEkr9Sj6D6e:ck7cmd+/U6RixheOafQ2xjdtFSjYp
TLSH
T1FDE52350D698C3F2C04038F55A02C7EB5E793E381762EEC73ADA3B68AD256C35632657
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

315611

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

Name

.text

Size

348KB

Virtual Size

348KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

359KB

Virtual Size

359KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

18KB

Virtual Size

18KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.data

Size

1.2MB

Virtual Size

1.2MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1.2MB

Virtual Size

1.2MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.mackt

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-03_dfa7784917e082cc016d8c5f2f60aef3_amadey_elex_smoke-loader

generic