2026-09-24_8ddd5df7c3b36f13a386c22ee5ce087e_amadey_elex_smoke-loader

General

Target
2026-09-24_8ddd5df7c3b36f13a386c22ee5ce087e_amadey_elex_smoke-loader
Size 603KB
Sample260925-fn643aag65
SHA256 eec1a6d003424e8160c38a7fb5b7e5febd7a36d646fab9e1bd6b141300c4b505
MD5 8ddd5df7c3b36f13a386c22ee5ce087e
SHA1 66e69aab444929e2842c5cef3ed8b8e1682863e2
SHA512 2016ef6592f716bcfb40309c5ac78ccee34cb6d5e41f78f8b8d5933662dcda92d1450a9291e69a8ad01fa80c1b4ed000f61a78b62cf73fdc2d29b2e298a660b2
SSDEEP 3072:pFkWJEN5Ex8OpwCBbGpuSB3ksKx6JzVFjSHfIoUqOAg0FuDoDZxfTlTf1r4OcZ51:XiNixxpwMI/9BJBtSwAOUDZnNsOwzeU
TLSH
T1F4D41A83B4121066DCBAE4356C01DED962736CFAA2A8662343E579094F3B5C36E37D73
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-09-24_8ddd5df7c3b36f13a386c22ee5ce087e_amadey_elex_smoke-loader

2026-09-24_8ddd5df7c3b36f13a386c22ee5ce087e_amadey_elex_smoke-loader

.exe 603KB

SHA256 eec1a6d003424e8160c38a7fb5b7e5febd7a36d646fab9e1bd6b141300c4b505
MD5 8ddd5df7c3b36f13a386c22ee5ce087e
SHA1 66e69aab444929e2842c5cef3ed8b8e1682863e2
SHA512 2016ef6592f716bcfb40309c5ac78ccee34cb6d5e41f78f8b8d5933662dcda92d1450a9291e69a8ad01fa80c1b4ed000f61a78b62cf73fdc2d29b2e298a660b2
SSDEEP 3072:pFkWJEN5Ex8OpwCBbGpuSB3ksKx6JzVFjSHfIoUqOAg0FuDoDZxfTlTf1r4OcZ51:XiNixxpwMI/9BJBtSwAOUDZnNsOwzeU
TLSH
T1F4D41A83B4121066DCBAE4356C01DED962736CFAA2A8662343E579094F3B5C36E37D73
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

6

Entry point

34859

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\Users\ani\code\squirrel\squirrel.windows\build\Release\Win32\StubExecutable.pdb