2026-09-29_c8d86f0e77da50131fe4f8c0a8f35d79_elex_smoke-loader_wapomi

General

Target
2026-09-29_c8d86f0e77da50131fe4f8c0a8f35d79_elex_smoke-loader_wapomi
Size 34KB
Sample260929-t8talabc72
SHA256 73ccb04b9a2973836f3f785a31201853e8ec8fef2ac57f9dbb65dad5822c9e00
MD5 c8d86f0e77da50131fe4f8c0a8f35d79
SHA1 2f4ee37212efbb2b3db854af3a0e252cb7ae4580
SHA512 19954d3ebcdd8ab51193d6962b9fc430da8ca4e6d327e18fb333357bc35b6980640699193c2415f8cb523b9279d07bb1221cc433ed4d0dc1f9535fcaf5e34f84
SSDEEP 768:isEKAtywwY0sv2+sPvm7CnfqQGPL4vzZq2o9W7GsxBbPr:UxtyDse+sXdJGCq2iW7z
TLSH
T1DAF29E43DB9028F2CB8025B1407279D699BF9D30CB41BDD78FA594660964AF0EDFF84A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-09-29_c8d86f0e77da50131fe4f8c0a8f35d79_elex_smoke-loader_wapomi

File Explorer

2026-09-29_c8d86f0e77da50131fe4f8c0a8f35d79_elex_smoke-loader_wapomi

.exe 34KB

2026-09-29_c8d86f0e77da50131fe4f8c0a8f35d79_elex_smoke-loader_wapomi

IMPHASH caa61b14e5d6d3cf2d31ce1e5818741c
SHA256 73ccb04b9a2973836f3f785a31201853e8ec8fef2ac57f9dbb65dad5822c9e00
MD5 c8d86f0e77da50131fe4f8c0a8f35d79
SHA1 2f4ee37212efbb2b3db854af3a0e252cb7ae4580
SHA512 19954d3ebcdd8ab51193d6962b9fc430da8ca4e6d327e18fb333357bc35b6980640699193c2415f8cb523b9279d07bb1221cc433ed4d0dc1f9535fcaf5e34f84
SSDEEP 768:isEKAtywwY0sv2+sPvm7CnfqQGPL4vzZq2o9W7GsxBbPr:UxtyDse+sXdJGCq2iW7z
TLSH
T1DAF29E43DB9028F2CB8025B1407279D699BF9D30CB41BDD78FA594660964AF0EDFF84A
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

32768

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

Name

.text

Size

8KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

5KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

512B

Virtual Size

480B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

~��u�

Size

16KB

Virtual Size

20KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

2026-09-29_c8d86f0e77da50131fe4f8c0a8f35d79_elex_smoke-loader_wapomi

vcruntime140

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-locale-l1-1-0

kernel32

generic

Sharing

General

Malware Config

Signatures

File Explorer

2026-09-29_c8d86f0e77da50131fe4f8c0a8f35d79_elex_smoke-loader_wapomi

vcruntime140

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-locale-l1-1-0

kernel32

generic