2026-08-12_8d91ffe7630a82159632f362922bde4b_amadey_elex_smoke-loader

General

Target
2026-08-12_8d91ffe7630a82159632f362922bde4b_amadey_elex_smoke-loader
Size 282KB
Sample260812-tbbz2sdf36
SHA256 d78382e123c8c5cee2972ff8fd6e2333bfd55aa73b0926b6606931dba92f2713
MD5 8d91ffe7630a82159632f362922bde4b
SHA1 8d9ba2d9480a19b5d660e5561e790f6ccfab94d9
SHA512 4cc1ffb73915825344ab102db760f8ab0615143bab46948d2dbca76c07cc55c7d5d72465701eb64d78db5b534af832d6753b2c9c0233a2199c1e4822c4913377
SSDEEP 3072:AB7Aznh5sDOgj2a/3sxMqrhnk4A1aZt6xafkMkvxiOAg0FuDGaApZfpc2fgIcMU:A0aDFj26QNr3ZciKjAOqZvNF7U
TLSH
T1C9544A18B7E2D37EC17256703D28D7511A6D7C700A628A3F63D47BEE1E706C19632AB2
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-12_8d91ffe7630a82159632f362922bde4b_amadey_elex_smoke-loader

2026-08-12_8d91ffe7630a82159632f362922bde4b_amadey_elex_smoke-loader

.exe 282KB

SHA256 d78382e123c8c5cee2972ff8fd6e2333bfd55aa73b0926b6606931dba92f2713
MD5 8d91ffe7630a82159632f362922bde4b
SHA1 8d9ba2d9480a19b5d660e5561e790f6ccfab94d9
SHA512 4cc1ffb73915825344ab102db760f8ab0615143bab46948d2dbca76c07cc55c7d5d72465701eb64d78db5b534af832d6753b2c9c0233a2199c1e4822c4913377
SSDEEP 3072:AB7Aznh5sDOgj2a/3sxMqrhnk4A1aZt6xafkMkvxiOAg0FuDGaApZfpc2fgIcMU:A0aDFj26QNr3ZciKjAOqZvNF7U
TLSH
T1C9544A18B7E2D37EC17256703D28D7511A6D7C700A628A3F63D47BEE1E706C19632AB2
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

6

Entry point

34859

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\Users\ani\code\squirrel\squirrel.windows\build\Release\Win32\StubExecutable.pdb