2026-08-09_c1197bc1dcbc793b716074b8eae13431_amadey_elex_smoke-loader

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-09_c1197bc1dcbc793b716074b8eae13431_amadey_elex_smoke-loader
Size 1.1MB
Sample260809-m5lb9aztft
SHA256 92a8895a7571ed9f35aa809bba8ed597b697b4ac0d7ffda9385b5aefafbca441
MD5 c1197bc1dcbc793b716074b8eae13431
SHA1 fe5d28bdded22afd93c5e10a15f7d5555709f539
SHA512 c9d147b9bf9a2123ec516993366aec51f0ea41f1946b087629d3d9aac371fe0e9a5a18f4600295a7ac16013540db8096c84173cba2f03296b2720e1606dfc57b
SSDEEP 24576:LrdJk/F2HY9JrTAcFS7HKIcy4dXwsbfHO1iXs:LBJkdMeBcLev9bvOiXs
TLSH
T17745AD07EBE4DCE2EC73067C05714A402B7BFCA55A61C707215C725EAF336958D26B2A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-09_c1197bc1dcbc793b716074b8eae13431_amadey_elex_smoke-loader

File Explorer

2026-08-09_c1197bc1dcbc793b716074b8eae13431_amadey_elex_smoke-loader

.exe 1.1MB

2026-08-09_c1197bc1dcbc793b716074b8eae13431_amadey_elex_smoke-loader

IMPHASH 6d465ff7292380a3c06ed27b9d3c4b38
SHA256 92a8895a7571ed9f35aa809bba8ed597b697b4ac0d7ffda9385b5aefafbca441
MD5 c1197bc1dcbc793b716074b8eae13431
SHA1 fe5d28bdded22afd93c5e10a15f7d5555709f539
SHA512 c9d147b9bf9a2123ec516993366aec51f0ea41f1946b087629d3d9aac371fe0e9a5a18f4600295a7ac16013540db8096c84173cba2f03296b2720e1606dfc57b
SSDEEP 24576:LrdJk/F2HY9JrTAcFS7HKIcy4dXwsbfHO1iXs:LBJkdMeBcLev9bvOiXs
TLSH
T17745AD07EBE4DCE2EC73067C05714A402B7BFCA55A61C707215C725EAF336958D26B2A
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

6900

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetModuleHandleA VirtualAlloc Sleep DeleteTimerQueue GetTickCount LocalAlloc LocalReAlloc ReleaseMutex ResumeThread GetLastError VirtualLock VirtualQuery GetSystemInfo IsBadCodePtr GetProcAddress GetSystemDirectoryA GetCommandLineA VirtualProtect RtlUnwind GetLocaleInfoA GetStartupInfoA GetVersionExA HeapFree HeapAlloc ExitProcess TerminateProcess GetCurrentProcess WriteFile GetStdHandle GetModuleFileNameA UnhandledExceptionFilter FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType DeleteCriticalSection TlsFree SetLastError GetCurrentThreadId TlsSetValue TlsGetValue TlsAlloc HeapDestroy HeapCreate VirtualFree LeaveCriticalSection EnterCriticalSection HeapReAlloc LoadLibraryA GetACP GetOEMCP GetCPInfo InitializeCriticalSection RaiseException LCMapStringA MultiByteToWideChar LCMapStringW QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime HeapSize GetStringTypeA GetStringTypeW

user32

IsZoomed SendMessageA GetDC RegisterClassA DestroyWindow

gdi32

CreateDIBPatternBrushPt SelectObject GetBrushOrgEx

psapi

GetProcessMemoryInfo

gdiplus

GdipDeleteGraphics GdipCreateFromHDC

winmm

midiConnect

Name

.text

Size

29KB

Virtual Size

32KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

6KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.data

Size

401KB

Virtual Size

404KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

Virtual Size

332KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

17KB

Virtual Size

20KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

pOAdVZTj

Size

1KB

Virtual Size

4KB

Characteristics

Name

fbbdETvH

Size

8KB

Virtual Size

12KB

Characteristics

Name

JLSSMdZh

Size

2KB

Virtual Size

4KB

Characteristics

Name

QbkoiOjN

Size

9KB

Virtual Size

12KB

Characteristics

Name

TynuiFOi

Size

2KB

Virtual Size

4KB

Characteristics

Name

lfvqCEEn

Size

8KB

Virtual Size

8KB

Characteristics

Name

jnbNudju

Size

44KB

Virtual Size

44KB

Characteristics

Name

PkIEFPmo

Size

3KB

Virtual Size

4KB

Characteristics

Name

kEnKIeqS

Size

3KB

Virtual Size

4KB

Characteristics

Name

HjdFrzyd

Size

1KB

Virtual Size

4KB

Characteristics

Name

FcgdSPWS

Size

512B

Virtual Size

4KB

Characteristics

Name

kcHUwhkn

Size

512B

Virtual Size

4KB

Characteristics

Name

FLpIyMPh

Size

46KB

Virtual Size

48KB

Characteristics

Name

aOueAquR

Size

15KB

Virtual Size

16KB

Characteristics

Name

TxWaunOg

Size

2KB

Virtual Size

4KB

Characteristics

Name

eazEYEfn

Size

1024B

Virtual Size

4KB

Characteristics

Name

rYnhkBGa

Size

1KB

Virtual Size

4KB

Characteristics

Name

EbPfSnnI

Size

1024B

Virtual Size

4KB

Characteristics

Name

FdcNNYpm

Size

11KB

Virtual Size

12KB

Characteristics

Name

uPHmZyAI

Size

512B

Virtual Size

4KB

Characteristics

Name

TxRzFQaL

Size

13KB

Virtual Size

16KB

Characteristics

Name

BIxnuVGf

Size

14KB

Virtual Size

16KB

Characteristics

Name

vEcrMayl

Size

1024B

Virtual Size

4KB

Characteristics

Name

nurpCNvt

Size

7KB

Virtual Size

8KB

Characteristics

Name

ELktXpgd

Size

47KB

Virtual Size

48KB

Characteristics

Name

MkvtCopM

Size

5KB

Virtual Size

8KB

Characteristics

Name

pKGEzXff

Size

33KB

Virtual Size

36KB

Characteristics

Name

znscUXCw

Size

3KB

Virtual Size

4KB

Characteristics

Name

OnsVedhN

Size

512B

Virtual Size

4KB

Characteristics

Name

TMobzRUZ

Size

2KB

Virtual Size

4KB

Characteristics

Name

SaTCglxZ

Size

3KB

Virtual Size

4KB

Characteristics

Name

gqVlRxVh

Size

2KB

Virtual Size

4KB

Characteristics

Name

PPxzNOnO

Size

15KB

Virtual Size

16KB

Characteristics

Name

qqnlwXxM

Size

3KB

Virtual Size

4KB

Characteristics

Name

cIfifbnm

Size

6KB

Virtual Size

8KB

Characteristics

Name

LYzchZKo

Size

512B

Virtual Size

4KB

Characteristics

Name

ziNHowwe

Size

1KB

Virtual Size

4KB

Characteristics

Name

mmzIGNiK

Size

11KB

Virtual Size

12KB

Characteristics

Name

GzTXplzX

Size

2KB

Virtual Size

4KB

Characteristics

Name

nPLzHVre

Size

2KB

Virtual Size

4KB

Characteristics

Name

iLTBAzqE

Size

4KB

Virtual Size

4KB

Characteristics

Name

vwGeiYYX

Size

8KB

Virtual Size

12KB

Characteristics

Name

fWNSISJV

Size

1KB

Virtual Size

4KB

Characteristics

Name

DDtiGKJN

Size

7KB

Virtual Size

8KB

Characteristics

Name

BuUDAwVs

Size

7KB

Virtual Size

8KB

Characteristics

Name

FnddgxpW

Size

7KB

Virtual Size

8KB

Characteristics

Name

QSeQSmRq

Size

3KB

Virtual Size

4KB

Characteristics

Name

gvLIgWTL

Size

10KB

Virtual Size

12KB

Characteristics

Name

dHAxZRuO

Size

5KB

Virtual Size

8KB

Characteristics

Name

HmVnHYak

Size

1024B

Virtual Size

4KB

Characteristics

Name

pTYzCCIt

Size

5KB

Virtual Size

8KB

Characteristics

Name

AUWkPmOe

Size

1024B

Virtual Size

4KB

Characteristics

Name

laYvjWuu

Size

91KB

Virtual Size

92KB

Characteristics

Name

EpWUnaOd

Size

18KB

Virtual Size

20KB

Characteristics

Name

KvbCxZhq

Size

25KB

Virtual Size

28KB

Characteristics

Name

qzSafVSb

Size

56KB

Virtual Size

60KB

Characteristics

Name

FuauPAoE

Size

3KB

Virtual Size

4KB

Characteristics

Name

quivHUco

Size

3KB

Virtual Size

4KB

Characteristics

Name

UhcOYczf

Size

4KB

Virtual Size

4KB

Characteristics

Name

TDpnTSWt

Size

9KB

Virtual Size

12KB

Characteristics

Name

sfCarIIL

Size

26KB

Virtual Size

28KB

Characteristics

Name

JVPSZsms

Size

2KB

Virtual Size

4KB

Characteristics

Name

ORlPyaxj

Size

4KB

Virtual Size

4KB

Characteristics

Name

uvjFeWrR

Size

2KB

Virtual Size

4KB

Characteristics

Name

wCDypRxA

Size

1KB

Virtual Size

4KB

Characteristics

Name

WIkRYIIC

Size

15KB

Virtual Size

16KB

Characteristics

Name

ysYvYBFA

Size

2KB

Virtual Size

4KB

Characteristics

Name

ETsDphMH

Size

1KB

Virtual Size

4KB

Characteristics

Name

JWHuJRns

Size

1024B

Virtual Size

4KB

Characteristics

Name

RaIgFjux

Size

11KB

Virtual Size

12KB

Characteristics

Name

aognPTfp

Size

512B

Virtual Size

4KB

Characteristics

Name

oJUNjjKu

Size

14KB

Virtual Size

16KB

Characteristics

Name

KnzQqHxF

Size

18KB

Virtual Size

20KB

Characteristics

Name

KrHBuUFv

Size

512B

Virtual Size

4KB

Characteristics

Name

OtMDrDIf

Size

1KB

Virtual Size

4KB

Characteristics

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-09_c1197bc1dcbc793b716074b8eae13431_amadey_elex_smoke-loader

kernel32

user32

gdi32

psapi

gdiplus

winmm

generic