2026-08-08_6aef1a49029cc633d414f3ba305a6ddc_amadey_cloudeye_elex_smoke-loader_stop

resource
2026-08-08_6aef1a49029cc633d414f3ba305a6ddc_amadey_cloudeye_elex_smoke-loader_stop

IMPHASH da05b63779f7838b9c3a326feb197b67
SHA256 dfecd5a87f2a811798b46995fab92aeef00837637a876acdbf665276195f2a8c
MD5 6aef1a49029cc633d414f3ba305a6ddc
SHA1 ecb8d8e8df7ee7c3555515631e50c175eae48161
SHA512 8c1d0f3f6db2adb87487eb6d15576d9e6c53578778b84d7ea7405580ed0e3d80014fa0bbc52093a8e82f67ed8d3cc0cc1e99a0b5a3b53c2de6ce04a3df3f8aa5
SSDEEP 393216:bN5IPOocS3mbJ8t33b0LZkaOT8Hlm1M6EshzHbO7BqRwwQMU:bUx53mbMHYlkaybM6BhbbO7JI
TLSH
T1A3F6239E2DC740F6D9C104B4971B7BEB23F3969A0AD98C772EC13489B0A1FF5607A446
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

8281925

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

Name

.text

Size

26KB

Virtual Size

28KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

5KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

1KB

Virtual Size

128KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.ndata

Size

Virtual Size

80KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.|A]

Size

5.5MB

Virtual Size

5.5MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.]?k

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

. \g

Size

9.8MB

Virtual Size

9.8MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.reloc

Size

2KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

94KB

Virtual Size

93KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

. \g

SHA256 1e726c3ddfd957580a99147b96a20aaf577add63312ddba03037e5e5ec26297d
MD5 8890f4440276b07caa6a89797d232a3a
SHA1 41ca59435ee7e4956c09903367f0514e0febcb72
SHA512 5dbc2710fb9cd711af1fd4ec46f11c809b575805610ca1f16462146c4306f91e52380e2ce2bb37db52299c59a7733ac5c2bf3808d9a4584dbf25a3b47cda67dc
SSDEEP 196608:Gb0LZkFw6VTwxhZVTcF1M6EshmAHbOyuBqxPD0erl+Ri6GYrS89/:Gb0LZkaOT8Hlm1M6EshzHbO7BqRwwQM
TLSH
T138A633DE3D8B40F6D9C204A4A71B67E723F7658E09D98C352AC13449B0B1FBAA17F446
MD5 SHA1 SHA512 SSDEEP TLSH

.]?k

SHA256 7c70d725998670b6bfec370dd5c36b61a30f520a12ec043b86551f4b3756b3ab
MD5 f3851cb1f66dbfef1d31a7d1d2e96998
SHA1 b5a466373d057a5032de857ffe7e0b93a4582966
SHA512 9ebd23bbc5e02a263450bb49da7e12163416a14fc216867aa06391b1b794716f6b224ddd553580fa77b176f3fd7de18cc15fd666cda2a634ef886d62250a01e0
TLSH
T1E6F011C22E03CC8CC282803B822EBE0380F0002808B23A022230833A82AB2A02C208C2
MD5 SHA1 SHA512 TLSH

.data

SHA256 a48ca0b72ad0c9ab10506f494568e49843d06082c12b89a331627e6b69eb8289
MD5 e411b225ac3cd03a5dad8143ae82958d
SHA1 64636f7804874ab0231d3bca77ed62cd293c8879
SHA512 e0b94d84d1888faeaa2a94965f1d5cf5a32a6a59c6778ba5bf449905f5904e5eff7e7a5f4ef42a955967e3499694b1801192b9b21ce3ac08eb48aaef89c23f12
TLSH
T19A313110B7E98209F2F35BB52C7989260ABA7CA1DDB0E35C0240941E2872A1589F8737
MD5 SHA1 SHA512 TLSH

.rdata

SHA256 df133ef1d4847d11a37ddb55ecffc4e301473a5d81dbd67871b18507c9a89d40
MD5 1b1865c332c08f16f3b739e33b5410a0
SHA1 766e9c28224b33bfc3b0ba711fdbcc218bcc8258
SHA512 94c8e8cde8a5170691ad30fe49ecac445c8a1ae38f1262f9c525ef3bac8de88aab25d9d0096891073f6ad1ea7f0b2f94f92ee6f561a8e4065e36dec1d8afb66a
SSDEEP 96:cxWnorPIzrMl8xCBvtTNw3ecNkUqX7cb1T97zu9ou9Uch/ULxDYNpFyd8j:QulrLITNjCkUqX7G1Tpzu9Nhs1YTF
TLSH
T1EBB13B47A351081AF59F0EBC1A6D0816E63AAC260538C64B0364963CBC35BD88CE5F7E
MD5 SHA1 SHA512 SSDEEP TLSH

.reloc

SHA256 c3eab9473af531ae92b52c174eef728ae7ef5c74d7fd2ba8c3a247ed6e1490be
MD5 01d3bd40fa5b9008eabbf62d53e960b1
SHA1 845054f3b5011c07db9f265214883e6882861790
SHA512 6c9ab51e35d8ea957636bde703f39083572570c8b715dedaf8ddb2bb8062ab6f8f32fbf078e04a142c1c1294acf67bc155847128c226a10dc2eb803bab454bcd
TLSH
T132410B1214680905C433D4754AC73A37AF4C296B84623EDEC62276B03531AF9F837B9B
MD5 SHA1 SHA512 TLSH

.rsrc/GROUP_ICON/103

SHA256 f75b383d2526ef6dc9d04946b2422bbb60c11f323fe3309f664f37b60ff6c81d
MD5 d369b9fd99e5217f51f3c0a69577bb37
SHA1 a506cad002bcac33da79cdb887b6bc9695da0bd2
SHA512 0b8e21eb0e144397553e83f2e4a917188a1d987b187aff56e2a62dbf9de95143b4970d22858f45b45eb275817681205a2a5c94f6c86c1a93fe59f1a451170071
TLSH
T1CAC08C029B04082CE2D01BB4040B033B813CC4E502A32607009F49A47C430381D78B19
MD5 SHA1 SHA512 TLSH

.rsrc/ICON/1

SHA256 3a06564b137854b378f6e8d751e6bd54a699980812cbde5274af4d9b98bc25a8
MD5 9cde3ff5d4d9d7dd17985b83dc625be7
SHA1 ad6b7f09d5d7535bbfa0c8c823b31c83030b6e5e
SHA512 b2be12b011fce25b042cd8338f234e5f505da64dd49fc738d50fdd056d0744b4b35291dd5f1eba4e043755757654d588f22a7eab8e4d21f08aa3c93747cf7729
SSDEEP 768:dzpAWncEu8U92Y2q458U+hXu3uqhvf9FmDFU6rw/kgnmTpid2PX9dL/J+rsanfK:dz/5r1J8U+lYrhvFF2jskCIp1NdLqsai
TLSH
T19113F10964D79482DBF8BB8E51457C3829B016B45E63D91CED30BFC8AC42EFAE6EC145
MD5 SHA1 SHA512 SSDEEP TLSH

.rsrc/ICON/10.ico

SHA256 526cd0cc2cb7d7e73edb81736d05affd42cefe47e0a12c12c455ef79eaf443c1
MD5 29022fb9c928a90b2086f64572415d55
SHA1 fcfaec37910b6e1feb1296d2acbae0d3ab9b1e7c
SHA512 b94fe30bfeb122d34b0d39e7163121798d16dd370c347d3a9e3b8dfc3d391ee465a9f98bb1a71c6aae196e0d468c50815d6df636be09be4be6fbb8b1b3a13076
TLSH
T14121FD857585EC69D5108435686EE1F26448B027D40D2AC3B6EE6F573C62A03BBA6520
MD5 SHA1 SHA512 TLSH

.rsrc/ICON/11.ico

SHA256 e7ea4f3db4c7a1b5fc1ab6613a074acbbd27f8c1f5cd4a8e83fdd6afca095b18
MD5 db6e8c10842892700db0c38262ffa5f5
SHA1 191b7add55e814d689f276bfbaf349f3a554b2bc
SHA512 5fb6d406445006b21a4db87b853e2b67634cabe7bf4a97bcdaefca1a45edcf91c105456623faf41ee376a2572191a1e53648d7c40dce0b7830d11e45a4dcd85c
TLSH
T1B621982419E7D9AAC8A0153744BAF833E35C72CB8D1C1E07C754DAC80B2C20C9820B14
MD5 SHA1 SHA512 TLSH

.rsrc/ICON/12.ico

SHA256 ca94fec8540d9ae923bc070c920d62ffef14c54d19233c8df5ab01178c0c4702
MD5 5388a4e8b30f373bbf460ae6f1c21e8f
SHA1 e7cce7dc1c1fd9aa8584b39b2489975fec372c5d
SHA512 27edac8ec2cff3d6516db36e6c19abda25929c8c0ce037c6f09decc6ba71095be58731752ff1f064538c87ffc8ac074389fbe165757f64a519128bd541d2d286
TLSH
T1F8012D93B245749FC04549308447C3B43C7C7C54D72456A377D47E4F2E752E56A8297D
MD5 SHA1 SHA512 TLSH

.rsrc/ICON/13.ico

SHA256 f87ffd149a2f62276b95c4145273917aeffbe24ffa9caee0c92e79027cac234b
MD5 6ee8f6f4abf941b8881ff64d6ce19190
SHA1 1acaf8f16e13fa2674923dada9147d9dcc8bb57c
SHA512 b4090fe93161dcf2b372f062dde50af5b98e91011632c6fe07163ec082bb150cf620bd9ba0a764515628b874b5bbc205931134917496b3e924d3a46d3c960d61
TLSH
T11BE05E8230F0EE68C01406319C139BB80E44FC67CC644107A6F05D9F2CF0104BC239A4
MD5 SHA1 SHA512 TLSH

.rsrc/ICON/2.ico

SHA256 515100d0dab1300fb03b762d7a2c1ad230d743a56eeaafd16bf1105dd3ab654d
MD5 1fac11e32a4807b987931e3ec93d4ff1
SHA1 e475cca1ac97c0ffb9944b16c8ea48172dbb6ee0
SHA512 a7e7c6abaa93fa67e37a2fff85b62252e2bc16e97ecc94e8b4a48855ba374fee5173617d1df35891a8093aca4f236b8771820dcde511ef6f821a2cd69bf161aa
SSDEEP 192:xue2LTk9tlh6GLf6NAZUH/gf8naXWQlJOUCHXJmbiiiiHjYxBQwQl:IvPkrlh6GLiNAZUH/YHGQfOUC5Cjij8
TLSH
T10E729426BA47FDB7EA5CA7301A73E65C602CED340A3B4586CF0DF5C45675AE8B86B040
MD5 SHA1 SHA512 SSDEEP TLSH

.rsrc/ICON/3.ico

SHA256 e9cfb6ca19afcd2e35b5b78cda078306a2d99fa42d48736994632b686186b7b8
MD5 d1b0c8efcd80affedf1ec573cb5ec1a5
SHA1 98c50551f6034a6079b5d92a76ad378c92152325
SHA512 bd3904302abefd32e38985ba9b238626540d0074fefe451d9361177e6aeb79ffff04806c2fceb190b7055258e7c2b1e2476e20f9496fd9158cf23a7bc8ba42e6
SSDEEP 96:BUn8FZIYQmi+IDoHP3kkctckZAm2M7XgV+J4Eaw5Hl/3VQrX0kKEeJEHYlh+Q:SngIsxctckZANM7Xgk9PfOronOHYl1
TLSH
T10612D916A98ADC36F64C42748A73D469612DF9240A37078BCF0EC9C45938FBC7CA71C6
MD5 SHA1 SHA512 SSDEEP TLSH

.rsrc/ICON/4.ico

SHA256 855abc9c61f5c3149757abce222ebdd0b4f18aa92a6694de9f8730423c79b0a1
MD5 9ccbd5d549975b47416f8fde526dafa7
SHA1 6473f461c412caa8f2b4ca9e14c52c832c7ab9eb
SHA512 17a79b15e78a34d6728b4906afcb9fdb244277c92be933c46c2fde4b6e8a36e72698009b6486daa100b4c715a887cdec5c0eef623275d396e9f2f5f78f1f0872
SSDEEP 96:haxY0+/dHNkdEqay0n6PZy0qEvaw2aM73at4mwtx+79:UxY9NNkdH0nyZeaaOamwU
TLSH
T14FE1E725BA8BDC66D724933098B3F751213FE8140E2B264ADE6FC9C5AE34F9875CB444
MD5 SHA1 SHA512 SSDEEP TLSH

.rsrc/ICON/5.ico

SHA256 f124bcf9b75437621cad5dad84ff1530ebdbb94584b0cfb6094ffb1bd917c72a
MD5 747bd457dd91f03d1c2f4558eac5b082
SHA1 e12a5f9b875c6b4d93d2da930bb20535ed7f88ee
SHA512 0548eb0d252a4066603e618cbbaf50fdf9cc785078769ae9ee05c6788683202282bfb38ae1afa66bba0a5366ae0a461f223e8d1ade29cb646b065c3a5f0af4c5
SSDEEP 48:3Kt4hrrP60X9rHVsBYcAtMqyxjEsbAhXLByqCzJca2+215K9m94Q0icfbMiIzTX9:3Kt29TVsBYEqymVCzJc31weQUb9
TLSH
T10F91C6237E4EDE73E75AA33545B3DA48742DF46806271B47C91A82C61530D5C79F34A8
MD5 SHA1 SHA512 SSDEEP TLSH

.rsrc/ICON/6.ico

SHA256 ec0f9dbe37300e94f300efecbbbfdfab76d2bb2cb8082ec1b52310bad5124142
MD5 d297dd6bbd9a3c8633338d98ca6c4f8d
SHA1 64a47273a0dd051db212da9d97ed7e65a55f62a5
SHA512 2179a02c674f2419bc121dc0c9c29790199d92d18646bef751942b816688191935efdaa1fa11d99b1d95d652dc242609ed7101a5505481fbfe096cfe1c248c5f
TLSH
T16971E8A4EEC6DA53D4440934D458D2FCAB210CFDF8442FD33261BF8F3632645A24A326
MD5 SHA1 SHA512 TLSH

.rsrc/ICON/7.ico

SHA256 2015b2ea2212f66c67273fd530fafaaad035a921a4091ec7276b0d1b8b5343d3
MD5 5b64862c5e9167b1a4b03ad9bfbe2afa
SHA1 67150ce3fee3506490f656d8877db8b64f40db79
SHA512 a25cbf91fe4203ea88513f075f96a7dabf7603993b54285af082389af614c039a8e052fa43c4ccdda4c45dc4f35164a41c6759a2c53d596738bbaf3abf1f715b
TLSH
T11D51D663BC65DE32E7A8ED354EE1E7692424C9050E540981FB3AD8E44F3069D9CEB4C4
MD5 SHA1 SHA512 TLSH

.rsrc/ICON/8.ico

SHA256 841df08e06a3fe4e38893061a8beab3defa94c68ddf804cf953a4098bd8ebb6a
MD5 e2083fe121fcf121ae57ef190bbc3715
SHA1 8df2540a439c285311eb828bb7aa7bc1ab29a7c1
SHA512 d4888ca70b214832783daa9c112f9fe2acec4811297b4af8dcfd9dc5252ac02685cadf55f3179a9f0f40cfd0c925eaaedc9bb79bd8cdc86975a10b76d1c46a72
TLSH
T16741C845F26D9499E450563D641AA0F1713D3882610EDA9377ACBF5F3C232232B06870
MD5 SHA1 SHA512 TLSH

.rsrc/ICON/9.ico

SHA256 91460d9aabea7edbdc41db62ebb41bd600d350ad3bff2c2278c4e93d60e5e725
MD5 6ea10ca45011bfc8efd94d49f638f9e9
SHA1 fb97b2ee7d7b7978ed52fb75a03058001b1a378e
SHA512 619c7c4d428232633c78974af9a378dcfe693735517dc0e77a318f71a3b2089eaf83d569d6c6e719d9b34c7898c773d5da917dbfe6eeb111c99ea10095463e01
TLSH
T1CC31EBBBFD97DCABD162D1308AE5C60A54BCCC040E462742DF3DC5A84A75B44EC7A090
MD5 SHA1 SHA512 TLSH

.rsrc/MANIFEST/1

SHA256 548658e2e04f88bfd72545681d59ed8b10fe5cd054030a4a8b98dea5f2b4502e
MD5 face060ca68fa1b25c4f6109ca944ca9
SHA1 686408132aee069adccd8ebe9818be5dc2837ee7
SHA512 b95300418af874402d41da0b906b7e03bb6801b89ea75bc00ccd9605b94e7a9622a7b088db42224cd72d9df21a518800a0bd26be177eacf47572bdd66faea4f4
TLSH
T15C211081D424A0A6E76201E33AB8F285246A93AF08CC46ECC4C5CA3DB202ACBC7521A1
MD5 SHA1 SHA512 TLSH

.rsrc/version.txt

SHA256 8c2d4c0557fb016d26f7c38b2018d18399c88af544a73af72960cb2292a0c07d
MD5 7f2412960f3a157162f6797c85dfd9be
SHA1 2dd1ce8b9dc3c87a78bf9f936225e9b439342369
SHA512 4124852f19ef95df4186d68937516c19623b34e635b79957e02feccc5f3c2d85e2521075df3e2a86cd7c2943fc0e36ed79ac18dee744957b164c959acdabdc7e
TLSH
T15B214F1A95F72199A0A7F9895ED6883243533D10053DA62E99CC7E4E4FD340429127F7
MD5 SHA1 SHA512 TLSH

.text

SHA256 13655be95a28c4da10a03152250d1d2e4d9fe69e28b9200980fe458ccf4e91f2
MD5 a9f90a6aa5777c68a969b48e6f2c8fbd
SHA1 5cc2f5ed4cf7f410e8f03b249e44944e5fee9357
SHA512 c796278f47b0ac878acc1af783674f9fc3b8e943b700c219ff59229148ab96788f75f624f461c0872a0b23b8230063512b9c4b3c2200742b4c922474d32154b8
SSDEEP 768:q+F8BQ0h80bVfE+66ZeY8WPKVHWzkulB3ILkXuYGWrzL:qa8BQ0zeUZeY8eKV2Oc
TLSH
T168C29E7573A0C4B3C90347718F7A63B9E3FAE33115652A8B5B201E9479656C2EF0F642
MD5 SHA1 SHA512 SSDEEP TLSH

.|A]

SHA256 1e79d6ce974703c513bd516cf93fa151424d65d6bccaf8da9a38a69bf5d899a7
MD5 c7e5e89d46c85ebd2012e5e6ee4760ce
SHA1 1377a87fce46bdc189c80e700eae6ba68c169b54
SHA512 5eeac4cbcbc6ec9dee568654f8418d2a32492b5c90457f074bd5080e99aeaa1ecee54f9f8e571492403eee7c0704ec026fa732f0e24725118b3817ab44000e6d
SSDEEP 98304:lW14ebVeeIVirqql/Fo1JD5tMLS+dR/QNze0eP7eDixFWkJfLovW1TGQpq:teZ5IV9qlYDILSCBUzBoFbJjo4G3
TLSH
T1E846239E2EC340F6D9810874971ABBDB23F386E64BD98CB36DC0748974A2FF56079446
MD5 SHA1 SHA512 SSDEEP TLSH