2026-08-12_474de5a386af00c13988ae89c376313b_amadey_elex_smoke-loader

General

Target
2026-08-12_474de5a386af00c13988ae89c376313b_amadey_elex_smoke-loader
Size 376KB
Sample260812-qefkvsch49
SHA256 b68ad2cc515b622b5dfc349ccac1a01da9e41e742146e0979ee76424b51d5873
MD5 474de5a386af00c13988ae89c376313b
SHA1 6af7c48bb3bf0a2e9df0a84ba9177643c54d4e65
SHA512 f0cf65b4cd558ab699f64388c818308f02b3a1f02643b627fb2d69b32f206fce862ee17eb9147b75339a3a1fe6a58495f9dcb4adb991d72442e68a41a762ef2e
SSDEEP 3072:UkGQf5OFMbpOxocTT1aSm2GdZaDEaOREQGu8z0uoOAg0FuDFTkXn9vrUTT/7cJrW:RR4MlOxX8TSD6dMDAOJTs9yAwcU
TLSH
T1CF849D16F1E2C433C1B226B84878DA9D086D7E525FA05E2B77C4772F1FB87828537926
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-12_474de5a386af00c13988ae89c376313b_amadey_elex_smoke-loader

2026-08-12_474de5a386af00c13988ae89c376313b_amadey_elex_smoke-loader

.exe 376KB

SHA256 b68ad2cc515b622b5dfc349ccac1a01da9e41e742146e0979ee76424b51d5873
MD5 474de5a386af00c13988ae89c376313b
SHA1 6af7c48bb3bf0a2e9df0a84ba9177643c54d4e65
SHA512 f0cf65b4cd558ab699f64388c818308f02b3a1f02643b627fb2d69b32f206fce862ee17eb9147b75339a3a1fe6a58495f9dcb4adb991d72442e68a41a762ef2e
SSDEEP 3072:UkGQf5OFMbpOxocTT1aSm2GdZaDEaOREQGu8z0uoOAg0FuDFTkXn9vrUTT/7cJrW:RR4MlOxX8TSD6dMDAOJTs9yAwcU
TLSH
T1CF849D16F1E2C433C1B226B84878DA9D086D7E525FA05E2B77C4772F1FB87828537926
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

6

Entry point

34859

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\Users\ani\code\squirrel\squirrel.windows\build\Release\Win32\StubExecutable.pdb