2026-08-08_9a3cad5059d67b32ffa7cd222fdf8d26_amadey_elex_smoke-loader

General

Target
2026-08-08_9a3cad5059d67b32ffa7cd222fdf8d26_amadey_elex_smoke-loader
Size 256KB
Sample260808-lvelaadj81
SHA256 dc9a9320d48f7a2a9f29ab8f7d28958d1b7a5ae4bb57430aecb05a5c421d8d19
MD5 9a3cad5059d67b32ffa7cd222fdf8d26
SHA1 f4558e63627e68907485da52d61d505d51a6af9b
SHA512 400b3ee0540e61f7111c9c555c4eacef24e2a740c7a4d69e03f6b5d709aa633571d0a64683c0c51d5c88a53fb5d07a4cf620ee7675fd5ae8f7af1dfaf01bcfe3
SSDEEP 3072:gHBE55ypEmh4ni57epqi0I/ksSB6p74NU3QmYRIcFcOAg0FuDANjr5RIIMU:gqSphh4nUotJpE23QDAO8NnInU
TLSH
T1A5444911B5C2C073C1B217370D78E7715AAE7D608A6D9E7B63EC372E8E341C18925EA6
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-08_9a3cad5059d67b32ffa7cd222fdf8d26_amadey_elex_smoke-loader

File Explorer

2026-08-08_9a3cad5059d67b32ffa7cd222fdf8d26_amadey_elex_smoke-loader

.exe 256KB

2026-08-08_9a3cad5059d67b32ffa7cd222fdf8d26_amadey_elex_smoke-loader

IMPHASH a99648a4d417f4130faca9d4625edb8e
SHA256 dc9a9320d48f7a2a9f29ab8f7d28958d1b7a5ae4bb57430aecb05a5c421d8d19
MD5 9a3cad5059d67b32ffa7cd222fdf8d26
SHA1 f4558e63627e68907485da52d61d505d51a6af9b
SHA512 400b3ee0540e61f7111c9c555c4eacef24e2a740c7a4d69e03f6b5d709aa633571d0a64683c0c51d5c88a53fb5d07a4cf620ee7675fd5ae8f7af1dfaf01bcfe3
SSDEEP 3072:gHBE55ypEmh4ni57epqi0I/ksSB6p74NU3QmYRIcFcOAg0FuDANjr5RIIMU:gqSphh4nUotJpE23QDAO8NnInU
TLSH
T1A5444911B5C2C073C1B217370D78E7715AAE7D608A6D9E7B63EC372E8E341C18925EA6
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

34859

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\Users\ani\code\squirrel\squirrel.windows\build\Release\Win32\StubExecutable.pdb

kernel32

GetModuleFileNameW GetModuleHandleW FindFirstFileW FindNextFileW FindClose CreateProcessW CreateFileW CloseHandle WideCharToMultiByte GetLastError MultiByteToWideChar GetStringTypeW EncodePointer DecodePointer SetLastError InitializeCriticalSectionAndSpinCount SwitchToThread TlsAlloc TlsGetValue TlsSetValue TlsFree GetSystemTimeAsFileTime GetProcAddress EnterCriticalSection LeaveCriticalSection DeleteCriticalSection LCMapStringW GetLocaleInfoW GetCPInfo UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent IsDebuggerPresent GetStartupInfoW QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId InitializeSListHead RtlUnwind RaiseException FreeLibrary LoadLibraryExW ExitProcess GetModuleHandleExW GetStdHandle WriteFile HeapFree HeapAlloc IsValidLocale GetUserDefaultLCID EnumSystemLocalesW HeapReAlloc GetFileType FindFirstFileExW IsValidCodePage GetACP GetOEMCP GetCommandLineA GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW GetProcessHeap SetStdHandle SetFilePointerEx HeapSize FlushFileBuffers GetConsoleCP GetConsoleMode WriteConsoleW

user32

AllowSetForegroundWindow WaitForInputIdle

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-08_9a3cad5059d67b32ffa7cd222fdf8d26_amadey_elex_smoke-loader

kernel32

user32

generic