2026-08-21_20f564921fe9475017a503dcad090a0d_elex_smoke-loader_wapomi

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-21_20f564921fe9475017a503dcad090a0d_elex_smoke-loader_wapomi
Size 48KB
Sample260821-ce2ansep6x
SHA256 a47bf51b6b2f58f8f313e32e43136cbb305b6fbd5d1511054fd25d3dcb4729ac
MD5 20f564921fe9475017a503dcad090a0d
SHA1 b8b5fc8ed927d5dba60f88122005d9f927be5d86
SHA512 4c021e00b54038f024180a44d9ff209dd482a1857f00fe38f456b8e5f30b2f7498602343d8c76f86546aa34324d2a43887a59e402880c1c111ea9d11537bed0c
SSDEEP 768:b1WuM8MBc2AoQ9AUrZ13dO7QGPL4vzZq2o9WYNEH:5WuMNWSQ9AUz48GCq2iWYWH
TLSH
T199236D127AD04437EAAA16FD509E39F757DADAF00BC901E3D7F002E94950AC51C3AD6E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-21_20f564921fe9475017a503dcad090a0d_elex_smoke-loader_wapomi

File Explorer

2026-08-21_20f564921fe9475017a503dcad090a0d_elex_smoke-loader_wapomi

.exe 48KB

2026-08-21_20f564921fe9475017a503dcad090a0d_elex_smoke-loader_wapomi

IMPHASH 052a5a5d77f12eb442b0c21bd846186b
SHA256 a47bf51b6b2f58f8f313e32e43136cbb305b6fbd5d1511054fd25d3dcb4729ac
MD5 20f564921fe9475017a503dcad090a0d
SHA1 b8b5fc8ed927d5dba60f88122005d9f927be5d86
SHA512 4c021e00b54038f024180a44d9ff209dd482a1857f00fe38f456b8e5f30b2f7498602343d8c76f86546aa34324d2a43887a59e402880c1c111ea9d11537bed0c
SSDEEP 768:b1WuM8MBc2AoQ9AUrZ13dO7QGPL4vzZq2o9WYNEH:5WuMNWSQ9AUz48GCq2iWYWH
TLSH
T199236D127AD04437EAAA16FD509E39F757DADAF00BC901E3D7F002E94950AC51C3AD6E
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

114688

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

c:\users\user\documents\visual studio 2010\Projects\AutoConfigure Server\Debug\AutoConfigure Server.pdb

Name

.textbss

Size

Virtual Size

64KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.text

Size

16KB

Virtual Size

15KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

9KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

�^�3�u�

Size

16KB

Virtual Size

20KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

2026-08-21_20f564921fe9475017a503dcad090a0d_elex_smoke-loader_wapomi

kernel32

shell32

msvcr100d

generic