2026-09-24_9097bbe664cc3dd9074b2302de09c1ab_amadey_elex_floxif_smoke-loader_stop

Sharing

Copy URL Twitter E-mail

General

Target
2026-09-24_9097bbe664cc3dd9074b2302de09c1ab_amadey_elex_floxif_smoke-loader_stop
Size 1.6MB
Sample260925-fdvy2sys8k
SHA256 06a349a430faacf8d56f014d83244165ddc851520d1bd458d5f6e6c7e8fbe12e
MD5 9097bbe664cc3dd9074b2302de09c1ab
SHA1 98bada33f41e465bb0885a910e2b635653c100ff
SHA512 1819f959d66cefcb1cea0fd412e4dab7cc2ad6cc369962dddea3119649f27f76d024d75904e9adfa97a3dcd81b96e0fdd7ffce154119b32fb6c816cf5bff7e01
SSDEEP 24576:IIkG2HudFj/SkP/Yw+kB/1ToTnRByEgaQ34U0ZJ1QT3KyTPvcB2R4VrEH7Q:I/G2HudFDPx+yZqQIU0ZT7
TLSH
T13475BE11F1828037C1A622B9A38B63BA71B65F38877914CB5AD0397EAF752F05E35317
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-09-24_9097bbe664cc3dd9074b2302de09c1ab_amadey_elex_floxif_smoke-loader_stop

File Explorer

2026-09-24_9097bbe664cc3dd9074b2302de09c1ab_amadey_elex_floxif_smoke-loader_stop

.exe 1.6MB

2026-09-24_9097bbe664cc3dd9074b2302de09c1ab_amadey_elex_floxif_smoke-loader_stop

IMPHASH 77dcacb8155cb0a88fe89c9dd775aa18
SHA256 06a349a430faacf8d56f014d83244165ddc851520d1bd458d5f6e6c7e8fbe12e
MD5 9097bbe664cc3dd9074b2302de09c1ab
SHA1 98bada33f41e465bb0885a910e2b635653c100ff
SHA512 1819f959d66cefcb1cea0fd412e4dab7cc2ad6cc369962dddea3119649f27f76d024d75904e9adfa97a3dcd81b96e0fdd7ffce154119b32fb6c816cf5bff7e01
SSDEEP 24576:IIkG2HudFj/SkP/Yw+kB/1ToTnRByEgaQ34U0ZJ1QT3KyTPvcB2R4VrEH7Q:I/G2HudFDPx+yZqQIU0ZT7
TLSH
T13475BE11F1828037C1A622B9A38B63BA71B65F38877914CB5AD0397EAF752F05E35317
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

1040704

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

h:\게임\황금사자\Lion\Lion2.pdb

d3d9

Direct3DCreate9

dsound

ord1

winmm

mmioAscend mmioDescend mmioSeek mmioClose mmioOpenA mmioRead

binkw32

_BinkOpen@8 _BinkBufferOpen@16 _BinkClose@4 _BinkBufferClose@4 _BinkDoFrame@4 _BinkShouldSkip@4 _BinkCopyToBuffer@28 _BinkBufferUnlock@4 _BinkGetRects@8 _BinkBufferBlit@12 _BinkNextFrame@4 _BinkRegisterFrameBuffers@8 _BinkSetSoundSystem@8 _BinkOpenDirectSound@4 _BinkGetFrameBuffersInfo@8 _BinkSetSoundOnOff@8 _BinkBufferLock@4

kernel32

GetLastError GetCurrentProcess GetPrivateProfileStringA SetLocalTime GetLocalTime EnterCriticalSection InterlockedExchange InitializeCriticalSection InterlockedCompareExchange DeleteCriticalSection LeaveCriticalSection GetFullPathNameA WideCharToMultiByte lstrcmpiA GetProcAddress LoadLibraryA GetModuleHandleA MultiByteToWideChar VirtualFree VirtualAlloc OutputDebugStringA MapViewOfFile GetFileSize CreateFileMappingA CreateFileW UnmapViewOfFile GetCurrentDirectoryA GetSystemInfo IsProcessorFeaturePresent HeapAlloc GetProcessHeap HeapFree EnumSystemLocalesA IsValidLocale GetLocaleInfoA GetStringTypeW GetStringTypeA IsValidCodePage GetCPInfo GetOEMCP GetACP HeapCreate HeapDestroy GetFileType GetStdHandle SetHandleCount GetEnvironmentStringsW FreeEnvironmentStringsW GetEnvironmentStrings FreeEnvironmentStringsA GetModuleFileNameA GetSystemTimeAsFileTime GetCurrentProcessId GetModuleFileNameW WritePrivateProfileStringA CreateDirectoryA QueryPerformanceFrequency QueryPerformanceCounter CreateFileA ReadFile WriteFile DeleteFileA CreateThread CloseHandle TerminateThread Sleep GetTickCount GetVersionExA GetUserDefaultLCID LCMapStringA LCMapStringW InitializeCriticalSectionAndSpinCount VirtualQuery SetFilePointer GetConsoleCP GetConsoleMode HeapSize HeapReAlloc DebugBreak WriteConsoleW OutputDebugStringW LoadLibraryW GetLocaleInfoW SetStdHandle FlushFileBuffers WriteConsoleA GetConsoleOutputCP SetEndOfFile RtlUnwind RaiseException GetCommandLineA GetStartupInfoA InterlockedIncrement InterlockedDecrement GetModuleHandleW ExitProcess TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TlsGetValue TlsAlloc TlsSetValue GetCurrentThreadId TlsFree SetLastError HeapValidate IsBadReadPtr

user32

ExitWindowsEx MessageBoxA wsprintfA ShowCursor GetSystemMetrics LoadCursorA LoadIconA RegisterClassA CreateWindowExA GetWindowLongA SetWindowLongA SetWindowPos ShowWindow SetWindowsHookExA PeekMessageA TranslateMessage DispatchMessageA UnhookWindowsHookEx GetKeyState CallNextHookEx BeginPaint EndPaint PostQuitMessage DefWindowProcA

gdi32

GetGlyphOutlineA GetObjectA ExtTextOutW MoveToEx ExtTextOutA CreateCompatibleDC SetMapMode SetTextAlign CreateFontIndirectW CreateFontIndirectA GetFontLanguageInfo GetTextMetricsW SetBkMode SetBkColor SetTextColor GetCharacterPlacementW GetCharacterPlacementA SelectObject DeleteObject DeleteDC CreateDIBSection GetTextMetricsA GetObjectW GetStockObject

advapi32

RegCloseKey RegQueryValueExA RegOpenKeyExA AdjustTokenPrivileges OpenProcessToken RegOpenKeyA LookupPrivilegeValueA

aceboard

?SendUserData@CAceBoard@@QAEXPAEH@Z ??0CAceBoard@@QAE@XZ ?GetQueueData@CAceBoard@@QAEHPAE@Z ?GetQueueDataSize@CAceBoard@@QAEHXZ ?OpenAcePort@CAceBoard@@QAEHPADK@Z ?CloseAcePort@CAceBoard@@QAEHXZ

iphlpapi

GetAdaptersInfo

generic

count=1, id=150, version=20413,

count=53, id=149, productName=VS2008 SP1 build 30729, version=30729,

count=166, id=131, productName=VS2008 SP1 build 30729, version=30729,

count=2, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,

count=1, id=109, productName=VS2005 build 50727, version=50727,

count=14, id=123, productName=VS2005 build 50727, version=50727,

count=2, id=25, version=9210,

count=3, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,

count=213, id=1, productName=Unmarked objects,

count=13, id=95, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,

count=6, id=15, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,

count=122, id=96, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,

count=151, id=132, productName=VS2008 SP1 build 30729, version=30729,

count=1, id=148, productName=VS2008 build 21022, version=21022,

count=1, id=145, productName=VS2008 SP1 build 30729, version=30729,