2026-09-08_f600e5bbdb093ed8142f6bd1127e60bc_amadey_elex_smoke-loader

General

Target
2026-09-08_f600e5bbdb093ed8142f6bd1127e60bc_amadey_elex_smoke-loader
Size 1.7MB
Sample260910-bzplyaee67
SHA256 14b3a23a197a5b66e2f346238df1102f091829c9cd2631e256c5feaadff7f714
MD5 f600e5bbdb093ed8142f6bd1127e60bc
SHA1 542916062e12d6bedb25b160b91ad7e70af63970
SHA512 fd1666325893450b1969a3828354412a289d3bdd37aa9a037091f30620c5936cf7cabecf96eeeb17d2e398e81ba54ac450444009b5d03342158a7ad32cd4ba92
SSDEEP 12288:kAQuA+rFoG9hVMhLcrG+hxfN6V7xjGDjWpbRYOypsu8xdaOv4GVvGr0ZJFXxogpm:kXubFsLcrGyxknw4FYnshx8OfVe247
TLSH
T10E85F1607796D032E6B201724E38E7AB452DF9540F7189DBA3D81B6ECE305C29A35F27
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-09-08_f600e5bbdb093ed8142f6bd1127e60bc_amadey_elex_smoke-loader

File Explorer

2026-09-08_f600e5bbdb093ed8142f6bd1127e60bc_amadey_elex_smoke-loader

.exe 1.7MB

2026-09-08_f600e5bbdb093ed8142f6bd1127e60bc_amadey_elex_smoke-loader

IMPHASH 270e9d8405d944c677ae9c9b4eceefef
SHA256 14b3a23a197a5b66e2f346238df1102f091829c9cd2631e256c5feaadff7f714
MD5 f600e5bbdb093ed8142f6bd1127e60bc
SHA1 542916062e12d6bedb25b160b91ad7e70af63970
SHA512 fd1666325893450b1969a3828354412a289d3bdd37aa9a037091f30620c5936cf7cabecf96eeeb17d2e398e81ba54ac450444009b5d03342158a7ad32cd4ba92
SSDEEP 12288:kAQuA+rFoG9hVMhLcrG+hxfN6V7xjGDjWpbRYOypsu8xdaOv4GVvGr0ZJFXxogpm:kXubFsLcrGyxknw4FYnshx8OfVe247
TLSH
T10E85F1607796D032E6B201724E38E7AB452DF9540F7189DBA3D81B6ECE305C29A35F27
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

41045

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\Working\MB\library\ProArt MB\Release\FanProfile.pdb

kernel32

LoadLibraryW GetProcAddress FreeLibrary CreateFileW CloseHandle EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionAndSpinCount DeleteCriticalSection SetEvent ResetEvent WaitForSingleObjectEx CreateEventW GetModuleHandleW UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent IsDebuggerPresent GetStartupInfoW QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead GetLastError WideCharToMultiByte SetLastError SwitchToThread TlsAlloc TlsGetValue TlsSetValue TlsFree EncodePointer DecodePointer MultiByteToWideChar CompareStringW LCMapStringW GetLocaleInfoW GetStringTypeW GetCPInfo RtlUnwind RaiseException LoadLibraryExW ExitProcess GetModuleHandleExW GetModuleFileNameW GetStdHandle WriteFile GetCommandLineA GetCommandLineW HeapAlloc HeapFree FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW GetFileType IsValidLocale GetUserDefaultLCID EnumSystemLocalesW GetProcessHeap SetStdHandle FlushFileBuffers GetConsoleCP GetConsoleMode ReadFile GetFileSizeEx SetFilePointerEx ReadConsoleW HeapReAlloc HeapSize WriteConsoleW

Sharing

General

Malware Config

Signatures

File Explorer

2026-09-08_f600e5bbdb093ed8142f6bd1127e60bc_amadey_elex_smoke-loader

kernel32

generic