2026-08-07_92442f2aee8a030bce09f8e3d96500cb_amadey_elex_smoke-loader

General

Target
2026-08-07_92442f2aee8a030bce09f8e3d96500cb_amadey_elex_smoke-loader
Size 273KB
Sample260807-l2zvsssdpg
SHA256 b6eaff82bdb347395eb4df9dce9c498119740886bb82bea0c5f805f1af82ebcb
MD5 92442f2aee8a030bce09f8e3d96500cb
SHA1 0e807e35a5953e65718ff9ee54345233c7ae6032
SHA512 1908d1608486b2edf9b08ca6748811a59ec65e1be093417476dc1cab0c1d9eaaeaeedb8903bc46807b0c2f4b71ceeb5e7bf9dd4a1372a9c3f8af5a1caae5fbce
SSDEEP 6144:DOWlQgd69jsbGbWXNSAOV7qiJDJJBOtwOhmDsxU:Degd69whojm8sxU
TLSH
T11C545A11B6C2F472D57216300F68D6A106BD7D2E4EE18A3BAFC6B7AE1F341818535A73
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-07_92442f2aee8a030bce09f8e3d96500cb_amadey_elex_smoke-loader

File Explorer

2026-08-07_92442f2aee8a030bce09f8e3d96500cb_amadey_elex_smoke-loader

.exe 273KB

2026-08-07_92442f2aee8a030bce09f8e3d96500cb_amadey_elex_smoke-loader

IMPHASH a99648a4d417f4130faca9d4625edb8e
SHA256 b6eaff82bdb347395eb4df9dce9c498119740886bb82bea0c5f805f1af82ebcb
MD5 92442f2aee8a030bce09f8e3d96500cb
SHA1 0e807e35a5953e65718ff9ee54345233c7ae6032
SHA512 1908d1608486b2edf9b08ca6748811a59ec65e1be093417476dc1cab0c1d9eaaeaeedb8903bc46807b0c2f4b71ceeb5e7bf9dd4a1372a9c3f8af5a1caae5fbce
SSDEEP 6144:DOWlQgd69jsbGbWXNSAOV7qiJDJJBOtwOhmDsxU:Degd69whojm8sxU
TLSH
T11C545A11B6C2F472D57216300F68D6A106BD7D2E4EE18A3BAFC6B7AE1F341818535A73
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

34859

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\Users\ani\code\squirrel\squirrel.windows\build\Release\Win32\StubExecutable.pdb

kernel32

GetModuleFileNameW GetModuleHandleW FindFirstFileW FindNextFileW FindClose CreateProcessW CreateFileW CloseHandle WideCharToMultiByte GetLastError MultiByteToWideChar GetStringTypeW EncodePointer DecodePointer SetLastError InitializeCriticalSectionAndSpinCount SwitchToThread TlsAlloc TlsGetValue TlsSetValue TlsFree GetSystemTimeAsFileTime GetProcAddress EnterCriticalSection LeaveCriticalSection DeleteCriticalSection LCMapStringW GetLocaleInfoW GetCPInfo UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent IsDebuggerPresent GetStartupInfoW QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId InitializeSListHead RtlUnwind RaiseException FreeLibrary LoadLibraryExW ExitProcess GetModuleHandleExW GetStdHandle WriteFile HeapFree HeapAlloc IsValidLocale GetUserDefaultLCID EnumSystemLocalesW HeapReAlloc GetFileType FindFirstFileExW IsValidCodePage GetACP GetOEMCP GetCommandLineA GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW GetProcessHeap SetStdHandle SetFilePointerEx HeapSize FlushFileBuffers GetConsoleCP GetConsoleMode WriteConsoleW

user32

AllowSetForegroundWindow WaitForInputIdle

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-07_92442f2aee8a030bce09f8e3d96500cb_amadey_elex_smoke-loader

kernel32

user32

generic