2026-08-04_34feded7c30a15c11ffe43ff156e5be8_elex_smoke-loader_stop

General

Target
2026-08-04_34feded7c30a15c11ffe43ff156e5be8_elex_smoke-loader_stop
Size 1.6MB
Sample260804-jldlhsvakd
SHA256 0f4f65ec8a8a4930aa4f9b062661d2bb0d14bd7f64610adedc235e6a93a8a414
MD5 34feded7c30a15c11ffe43ff156e5be8
SHA1 a66e9ca7b21b43a02450818765d4e55f5e185816
SHA512 53acfcf4cff912c25a8e778f4c3941d53119c232a18a88c14a44d42fd332507960f4447ab46539c8511297bfd4bc4bc60c26213d2334247b4261e1a735e39cc0
SSDEEP 24576:Jt/c7hMnmb57GBiOl6a8JTth/RWZvR6wQQ92pN3:JNEMmb5+Pl6bJTIZ5jdgp
TLSH
T170850202BBD7C173D95302768881CB6A957AB9026F6256D3EBD01F5FDA302C2AE37345
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-04_34feded7c30a15c11ffe43ff156e5be8_elex_smoke-loader_stop

File Explorer

2026-08-04_34feded7c30a15c11ffe43ff156e5be8_elex_smoke-loader_stop

.exe 1.6MB

2026-08-04_34feded7c30a15c11ffe43ff156e5be8_elex_smoke-loader_stop

IMPHASH 48dae12303389928de6040e466bd6370
SHA256 0f4f65ec8a8a4930aa4f9b062661d2bb0d14bd7f64610adedc235e6a93a8a414
MD5 34feded7c30a15c11ffe43ff156e5be8
SHA1 a66e9ca7b21b43a02450818765d4e55f5e185816
SHA512 53acfcf4cff912c25a8e778f4c3941d53119c232a18a88c14a44d42fd332507960f4447ab46539c8511297bfd4bc4bc60c26213d2334247b4261e1a735e39cc0
SSDEEP 24576:Jt/c7hMnmb57GBiOl6a8JTth/RWZvR6wQQ92pN3:JNEMmb5+Pl6bJTIZ5jdgp
TLSH
T170850202BBD7C173D95302768881CB6A957AB9026F6256D3EBD01F5FDA302C2AE37345
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

109592

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

d:\src\Steam2\Projects\GazelleProto\Tools\WriteMiniDump\vc80_release_static\WriteMiniDump.pdb

kernel32

GetModuleHandleA InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection DebugBreak FormatMessageA FindNextFileA InterlockedDecrement FindClose CreateDirectoryA FindFirstFileA GetLongPathNameA SetFileAttributesA Sleep DeleteFileA RemoveDirectoryA GetFileAttributesA GetCurrentProcess GetProcAddress LoadLibraryA GetSystemInfo GetVersionExA GetConsoleWindow OpenProcess WaitForSingleObject GetCurrentThreadId GetCurrentProcessId GetTempPathA RaiseException WriteConsoleW GetConsoleOutputCP WriteConsoleA SetStdHandle GetTimeZoneInformation CompareStringW CompareStringA GetFullPathNameA GetCommandLineA CreateProcessA CreateFileA GetFileInformationByHandle CreateFileMappingA MapViewOfFile GetACP WideCharToMultiByte GetLastError CloseHandle GetModuleFileNameA UnmapViewOfFile GetCurrentDirectoryA SetCurrentDirectoryA GetLocaleInfoW SetFilePointer FlushFileBuffers IsValidLocale EnumSystemLocalesA GetUserDefaultLCID InterlockedIncrement InterlockedExchange MultiByteToWideChar HeapFree TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlUnwind ExitProcess FileTimeToSystemTime FileTimeToLocalFileTime GetDriveTypeA HeapAlloc GetSystemTimeAsFileTime GetProcessHeap LCMapStringA LCMapStringW GetCPInfo GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError HeapDestroy HeapCreate VirtualFree VirtualAlloc HeapReAlloc WriteFile GetStdHandle HeapSize ReadFile GetConsoleCP GetConsoleMode SetEnvironmentVariableA SetEnvironmentVariableW FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetTickCount GetLocaleInfoA GetStringTypeA GetStringTypeW

user32

MessageBoxA wsprintfA

shell32

SHGetFileInfoA

version

GetFileVersionInfoA GetFileVersionInfoSizeA VerQueryValueA

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-04_34feded7c30a15c11ffe43ff156e5be8_elex_smoke-loader_stop

kernel32

user32

shell32

version

generic