2026-08-10_c267b044b39da920e1655361d2fd71d7_amadey_elex_remcos_smoke-loader

General

Target
2026-08-10_c267b044b39da920e1655361d2fd71d7_amadey_elex_remcos_smoke-loader
Size 355KB
Sample260810-cd3gcayglb
SHA256 413d73513b42a783134779975e43d8a5ed23f345d9f82319bbf56cbce56a148f
MD5 c267b044b39da920e1655361d2fd71d7
SHA1 d81602b1b0ac3ad7a48435c35d72a76262cdb7c3
SHA512 90d4cac25fcebdac9b58acfcf9fdd5335fc34a62b695d222345510e07c313070bbe44fde4a4b92f905c2e65b472770eba2ac5f253854f72136fb2e821792afbd
SSDEEP 3072:F7SuW5eEskQ7o/fQFaNPwZ8m7pHBSOAg0FubYOG9AB4UKdWnYuGe9I25V:Fm0x7yfQFmPG8QFAO8OwAB4UCWikV
TLSH
T155744820B5C3C172D0B716343968CB5A16297EF30EE18B6B73C93F1EDE7718195A1A62
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-10_c267b044b39da920e1655361d2fd71d7_amadey_elex_remcos_smoke-loader

2026-08-10_c267b044b39da920e1655361d2fd71d7_amadey_elex_remcos_smoke-loader

.exe 355KB

SHA256 413d73513b42a783134779975e43d8a5ed23f345d9f82319bbf56cbce56a148f
MD5 c267b044b39da920e1655361d2fd71d7
SHA1 d81602b1b0ac3ad7a48435c35d72a76262cdb7c3
SHA512 90d4cac25fcebdac9b58acfcf9fdd5335fc34a62b695d222345510e07c313070bbe44fde4a4b92f905c2e65b472770eba2ac5f253854f72136fb2e821792afbd
SSDEEP 3072:F7SuW5eEskQ7o/fQFaNPwZ8m7pHBSOAg0FubYOG9AB4UKdWnYuGe9I25V:Fm0x7yfQFmPG8QFAO8OwAB4UCWikV
TLSH
T155744820B5C3C172D0B716343968CB5A16297EF30EE18B6B73C93F1EDE7718195A1A62
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

6

Entry point

34859

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\Users\ana\code\Squirrel\Squirrel.Windows\src\StubExecutable\bin\Release\StubExecutable.pdb