2026-09-03_75ea2bf923de305dd945673e518f1926_amadey_elex_smoke-loader_wapomi

Sharing

Copy URL Twitter E-mail

General

Target
2026-09-03_75ea2bf923de305dd945673e518f1926_amadey_elex_smoke-loader_wapomi
Size 352KB
Sample260905-3a3wtavara
SHA256 896c768ce841a5a73a19a110269f863d1863bc37a843cebc3ac06db61211435b
MD5 75ea2bf923de305dd945673e518f1926
SHA1 e1e916f669f6f6290dfd8d0a6d36c7d00977ae85
SHA512 7ae21fb38050325a76651d0734dd4a322c4183670ec35ba2dcba76800f33b321ec80897c9093b611765e00f2e6e8497490e9ec9bfed153b6b93bc6748255e5cf
SSDEEP 6144:3dkcl5UDo+lW+tJxtWiXA7A5yHG2hBYoYYZSfSm6/TuJg1r:3dkXE+l7xtrX5QGscYKJg
TLSH
T1D9747B127BF9E43AD6430131CB5AABA5A4F9936899305C8727C40D6C2B75CC6D339F2E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-09-03_75ea2bf923de305dd945673e518f1926_amadey_elex_smoke-loader_wapomi

File Explorer

2026-09-03_75ea2bf923de305dd945673e518f1926_amadey_elex_smoke-loader_wapomi

.exe 352KB

2026-09-03_75ea2bf923de305dd945673e518f1926_amadey_elex_smoke-loader_wapomi

IMPHASH 9f8555558343316d38d05850595ed341
SHA256 896c768ce841a5a73a19a110269f863d1863bc37a843cebc3ac06db61211435b
MD5 75ea2bf923de305dd945673e518f1926
SHA1 e1e916f669f6f6290dfd8d0a6d36c7d00977ae85
SHA512 7ae21fb38050325a76651d0734dd4a322c4183670ec35ba2dcba76800f33b321ec80897c9093b611765e00f2e6e8497490e9ec9bfed153b6b93bc6748255e5cf
SSDEEP 6144:3dkcl5UDo+lW+tJxtWiXA7A5yHG2hBYoYYZSfSm6/TuJg1r:3dkXE+l7xtrX5QGscYKJg
TLSH
T1D9747B127BF9E43AD6430131CB5AABA5A4F9936899305C8727C40D6C2B75CC6D339F2E
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

364544

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE

PDB paths

oleaut32

SysStringByteLen SysAllocStringLen SysAllocString SysFreeString SysStringLen VariantCopy VariantClear

user32

CharUpperW

advapi32

LookupPrivilegeValueW GetFileSecurityW SetFileSecurityW RegQueryValueExW RegCloseKey RegOpenKeyExW AdjustTokenPrivileges OpenProcessToken

msvcrt

_controlfp __set_app_type __p__fmode __p__commode _adjust_fdiv __setusermatherr _initterm __getmainargs __p___initenv exit _XcptFilter _exit _onexit __dllonexit ??1type_info@@UAE@XZ ?terminate@@YAXXZ _except_handler3 _beginthreadex _ftol memcmp _purecall memset strlen wcscmp wcsstr strcmp memmove fputs fputc fflush fgetc _iob free malloc memcpy _CxxThrowException __CxxFrameHandler _isatty _fileno

kernel32

ResumeThread SetThreadAffinityMask CreateEventW SetEvent InitializeCriticalSection GetVersion CreateFileW VirtualFree VirtualAlloc SetConsoleMode GetConsoleMode GetVersionExW SetFileApisToOEM GetCommandLineW GetConsoleScreenBufferInfo SetConsoleCtrlHandler DeleteCriticalSection EnterCriticalSection LeaveCriticalSection QueryPerformanceFrequency QueryPerformanceCounter GetProcessTimes OpenEventW OpenFileMappingW MapViewOfFile UnmapViewOfFile SetProcessAffinityMask GetStdHandle GetSystemTimeAsFileTime FileTimeToDosDateTime IsProcessorFeaturePresent GlobalMemoryStatus GetSystemInfo GetProcessAffinityMask FileTimeToLocalFileTime FileTimeToSystemTime CompareFileTime GetCurrentProcess GetDiskFreeSpaceW SetEndOfFile WriteFile ReadFile DeviceIoControl GetLastError MultiByteToWideChar WideCharToMultiByte FreeLibrary LoadLibraryExW LoadLibraryW GetModuleFileNameW LocalFree FormatMessageW CloseHandle SetFileTime SetFilePointer SetFileAttributesW RemoveDirectoryW MoveFileW GetProcAddress GetModuleHandleW CreateDirectoryW DeleteFileW SetLastError SetCurrentDirectoryW GetCurrentDirectoryW GetTempPathW GetCurrentProcessId GetTickCount GetCurrentThreadId FindClose FindFirstFileW FindNextFileW GetModuleHandleA GetFileAttributesW GetFileInformationByHandle GetLogicalDriveStringsW GetFileSize WaitForSingleObject

Name

.text

Size

263KB

Virtual Size

262KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

52KB

Virtual Size

51KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

1KB

Virtual Size

9KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.sxdata

Size

512B

Virtual Size

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

15KB

Virtual Size

15KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

{��\�u�

Size

16KB

Virtual Size

20KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

File Explorer

2026-09-03_75ea2bf923de305dd945673e518f1926_amadey_elex_smoke-loader_wapomi

oleaut32

user32

advapi32

msvcrt

kernel32

generic