2026-08-09_22857249140907df808bc4bdd837ec67_elex_smoke-loader_wapomi

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-09_22857249140907df808bc4bdd837ec67_elex_smoke-loader_wapomi
Size 42KB
Sample260809-vmvrzabe58
SHA256 d934f47506999fd0d9823939dbba1298bce1d3a2a656704ecfd6273a799e606d
MD5 22857249140907df808bc4bdd837ec67
SHA1 32c56dcc557b20590d0d8c5690d40ad26c6e491b
SHA512 c54c90bb411c6773268055dea41a906a05ee82a1a1c519dc6554efec2e58e2a269a143e16db513fe8ef185165298e850030f6671e9ee2096ee48486f76a07174
SSDEEP 768:ZmowGWb+Hz+ZZ3fSEONTPo46nmXYQGPL4vzZq2o9W7GsxBbPr:tZ+ZZtOeMXzGCq2iW7z
TLSH
T172136B7F9E4444E2C5E0E931C356A606CABEA4E35BE339DFF392C40A1C903E9C935566
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-09_22857249140907df808bc4bdd837ec67_elex_smoke-loader_wapomi

File Explorer

2026-08-09_22857249140907df808bc4bdd837ec67_elex_smoke-loader_wapomi

.exe 42KB

2026-08-09_22857249140907df808bc4bdd837ec67_elex_smoke-loader_wapomi

IMPHASH 6fa1155cfabe9dfcc6ccbd239b10279d
SHA256 d934f47506999fd0d9823939dbba1298bce1d3a2a656704ecfd6273a799e606d
MD5 22857249140907df808bc4bdd837ec67
SHA1 32c56dcc557b20590d0d8c5690d40ad26c6e491b
SHA512 c54c90bb411c6773268055dea41a906a05ee82a1a1c519dc6554efec2e58e2a269a143e16db513fe8ef185165298e850030f6671e9ee2096ee48486f76a07174
SSDEEP 768:ZmowGWb+Hz+ZZ3fSEONTPo46nmXYQGPL4vzZq2o9W7GsxBbPr:tZ+ZZtOeMXzGCq2iW7z
TLSH
T172136B7F9E4444E2C5E0E931C356A606CABEA4E35BE339DFF392C40A1C903E9C935566
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

40960

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

qtgui4

??1QMessageBox@@UAE@XZ ??1QApplication@@UAE@XZ ??0QApplication@@QAE@AAHPAPADH@Z ??0QMessageBox@@QAE@W4Icon@0@ABVQString@@1V?$QFlags@W4StandardButton@QMessageBox@@@@PAVQWidget@@V?$QFlags@W4WindowType@Qt@@@@@Z ?exec@QDialog@@QAEHXZ

qtcore4

?free@QString@@CAXPAUData@1@@Z ?fromUtf8@QString@@SA?AV1@PBDH@Z ??1QString@@QAE@XZ

kernel32

QueryPerformanceCounter DecodePointer IsDebuggerPresent SetUnhandledExceptionFilter UnhandledExceptionFilter GetCurrentProcess GetLocalTime GetTickCount Sleep GetLastError SetLastError CloseHandle Process32NextW Process32FirstW CreateToolhelp32Snapshot GetCurrentThreadId GetCurrentProcessId GetTempPathA GetSystemTimeAsFileTime TerminateProcess EncodePointer InterlockedCompareExchange InterlockedExchange HeapSetInformation

advapi32

RegQueryValueExA RegCloseKey RegOpenKeyExA

shell32

ShellExecuteExA

msvcr100

printf _mkdir _snprintf_s _vsnprintf_s sprintf ??0exception@std@@QAE@ABQBD@Z ?what@exception@std@@UBEPBDXZ memset ??3@YAXPAX@Z memcpy memmove ??2@YAPAXI@Z _CxxThrowException ??0exception@std@@QAE@ABV01@@Z __CxxFrameHandler3 system _amsg_exit __getmainargs _cexit _exit fopen exit __initenv _initterm _initterm_e _configthreadlocale __setusermatherr _commode _fmode __set_app_type _crt_debugger_hook ?terminate@@YAXXZ ?_type_info_dtor_internal_method@type_info@@QAEXXZ _unlock __dllonexit _lock _onexit _except_handler4_common _invoke_watson _controlfp_s fprintf _XcptFilter fclose strcat_s _access ??1exception@std@@UAE@XZ

msvcp100

?_Xout_of_range@std@@YAXPBD@Z ?_Xlength_error@std@@YAXPBD@Z

Name

.text

Size

7KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

988B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

11KB

Virtual Size

11KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

1024B

Virtual Size

996B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

�G6T�u

Size

16KB

Virtual Size

20KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-09_22857249140907df808bc4bdd837ec67_elex_smoke-loader_wapomi

qtgui4

qtcore4

kernel32

advapi32

shell32

msvcr100

msvcp100

generic