2026-09-26_444894f84aee9658b42e175c3d3e2642_amadey_elex_floxif_smoke-loader

General

Target
2026-09-26_444894f84aee9658b42e175c3d3e2642_amadey_elex_floxif_smoke-loader
Size 2.0MB
Sample260927-vxa6bashjh
SHA256 d6cb366cc8807ca04d4a4656a7e47c6362f4417fa826d97e124284ae36c4fc17
MD5 444894f84aee9658b42e175c3d3e2642
SHA1 27e481ac6f018499ec32d29e332ef4ee1ecd125d
SHA512 f4a037e395164a56e4bbf7771a5e269f0c09b72cf9bd96d7b11e3d588e5169b3b90332871661c8fa389805aeb0a7e58d6dfce7ad07cea974444a99b13ec4a4ba
SSDEEP 24576:uS2Aqae9HzharLiUhmBIf1HrEH7uYrEH7yrEH7BrEH7xIrEH79rEH7PrEH7FrEHN:wae9ThWhme5gnY
TLSH
T16BA5BF10B740C3EDE9A2017135ADE9A494D7A83C0BEA10CBB54705D9DE7DBE35A3A60F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-09-26_444894f84aee9658b42e175c3d3e2642_amadey_elex_floxif_smoke-loader

File Explorer

2026-09-26_444894f84aee9658b42e175c3d3e2642_amadey_elex_floxif_smoke-loader

.exe 2.0MB

2026-09-26_444894f84aee9658b42e175c3d3e2642_amadey_elex_floxif_smoke-loader

IMPHASH 0f386aa49f0b7d4585a0c86bd00d17a1
SHA256 d6cb366cc8807ca04d4a4656a7e47c6362f4417fa826d97e124284ae36c4fc17
MD5 444894f84aee9658b42e175c3d3e2642
SHA1 27e481ac6f018499ec32d29e332ef4ee1ecd125d
SHA512 f4a037e395164a56e4bbf7771a5e269f0c09b72cf9bd96d7b11e3d588e5169b3b90332871661c8fa389805aeb0a7e58d6dfce7ad07cea974444a99b13ec4a4ba
SSDEEP 24576:uS2Aqae9HzharLiUhmBIf1HrEH7uYrEH7yrEH7BrEH7xIrEH79rEH7PrEH7FrEHN:wae9ThWhme5gnY
TLSH
T16BA5BF10B740C3EDE9A2017135ADE9A494D7A83C0BEA10CBB54705D9DE7DBE35A3A60F
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

318096

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

D:\1. Programs\드래곤잭팟(패치)\확률관련\Probability\Debug\Probability.pdb

kernel32

GetUserDefaultLCID EnumSystemLocalesA IsValidLocale GetLocaleInfoA FlushFileBuffers GetLocaleInfoW HeapQueryInformation HeapSize HeapReAlloc GetConsoleMode GetConsoleCP SetFilePointer LCMapStringW SetStdHandle HeapDestroy HeapCreate SetHandleCount GetEnvironmentStringsW FreeEnvironmentStringsW GetSystemTimeAsFileTime GetCurrentProcessId QueryPerformanceCounter SetConsoleCtrlHandler ExitProcess OutputDebugStringW GetFileType WriteConsoleW OutputDebugStringA ReadFile GetFileTime SetFileTime CreateDirectoryA GetCurrentDirectoryA FindFirstFileA FindNextFileA FindClose GetModuleFileNameA CreateFileA WriteFile lstrlenA CloseHandle GetStringTypeW GetTickCount InterlockedIncrement InterlockedDecrement Sleep InterlockedExchange InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection RtlUnwind WideCharToMultiByte IsDebuggerPresent MultiByteToWideChar RaiseException GetProcAddress LoadLibraryW DecodePointer TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter EncodePointer GetModuleFileNameW GetCommandLineA HeapSetInformation GetStartupInfoW FreeLibrary GetLastError IsProcessorFeaturePresent GetACP GetOEMCP GetCPInfo IsValidCodePage TlsAlloc TlsGetValue TlsSetValue GetCurrentThreadId TlsFree GetModuleHandleW SetLastError GetCurrentThread HeapFree HeapAlloc GetProcessHeap VirtualQuery InitializeCriticalSectionAndSpinCount FatalAppExitA HeapValidate IsBadReadPtr GetStdHandle CreateFileW

user32

PtInRect DestroyWindow GetClientRect PostQuitMessage GetCursorPos ScreenToClient SetRect IntersectRect DialogBoxParamA DefWindowProcA SendMessageA SetWindowTextA wsprintfA GetDlgItem GetWindowTextA BeginPaint EndPaint InvalidateRect EndDialog GetSystemMetrics LoadCursorA LoadIconA RegisterClassA CreateWindowExA ShowWindow GetMessageA TranslateMessage DispatchMessageA

gdi32

MoveToEx LineTo SetROP2 CreateSolidBrush Rectangle CreateFontA SelectObject SetBkMode SetTextAlign TextOutA DeleteObject GetStockObject CreatePen

comdlg32

GetOpenFileNameA

Name

.textbss

Size

Virtual Size

299KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.text

Size

634KB

Virtual Size

634KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

94KB

Virtual Size

93KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

6KB

Virtual Size

24KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

5KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

26KB

Virtual Size

25KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-09-26_444894f84aee9658b42e175c3d3e2642_amadey_elex_floxif_smoke-loader

kernel32

user32

gdi32

comdlg32

generic