2026-09-29_3e805da14031a2503525c9f56043b809_amadey_elex_floxif_smoke-loader_stop

Sharing

Copy URL Twitter E-mail

General

Target
2026-09-29_3e805da14031a2503525c9f56043b809_amadey_elex_floxif_smoke-loader_stop
Size 1.4MB
Sample260930-1qdkrawy3l
SHA256 eb82904c24575e23cfa0f9bdd9ad4cf08cb8b35f4c10e37ae3f0408aff52a0be
MD5 3e805da14031a2503525c9f56043b809
SHA1 4c8bc94f957cf68e0402033a18f02e3ac293348c
SHA512 2362e04df4a03d715693b93522544e7e5bc0716da8535f1878bec39b02bca3336912ba350f80171d2dd0ae0d7edd21b2ed89dcd4606627dcf56cb226ae6db4df
SSDEEP 24576:BYqcRZ0/KyTtw/QWW3K28GOKQTMAxjz08zaUbcIg+v5j2QlBmbvdxrEH7cs:BYqcR8GhsOrTMAx0e3gadlCvd4
TLSH
T1B5657C00AAE189B7C475117159B7D27576B3A92A3B36C743638C36383F213D15A263FE
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-09-29_3e805da14031a2503525c9f56043b809_amadey_elex_floxif_smoke-loader_stop

File Explorer

2026-09-29_3e805da14031a2503525c9f56043b809_amadey_elex_floxif_smoke-loader_stop

.exe 1.4MB

2026-09-29_3e805da14031a2503525c9f56043b809_amadey_elex_floxif_smoke-loader_stop

IMPHASH 1cbf1f138b4c017dade2326ae706d253
SHA256 eb82904c24575e23cfa0f9bdd9ad4cf08cb8b35f4c10e37ae3f0408aff52a0be
MD5 3e805da14031a2503525c9f56043b809
SHA1 4c8bc94f957cf68e0402033a18f02e3ac293348c
SHA512 2362e04df4a03d715693b93522544e7e5bc0716da8535f1878bec39b02bca3336912ba350f80171d2dd0ae0d7edd21b2ed89dcd4606627dcf56cb226ae6db4df
SSDEEP 24576:BYqcRZ0/KyTtw/QWW3K28GOKQTMAxjz08zaUbcIg+v5j2QlBmbvdxrEH7cs:BYqcR8GhsOrTMAx0e3gadlCvd4
TLSH
T1B5657C00AAE189B7C475117159B7D27576B3A92A3B36C743638C36383F213D15A263FE
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

583730

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

gdiplus

GdipGetImageThumbnail GdipCloneImage GdiplusStartup GdipFree GdipAlloc GdipDeleteGraphics GdipDisposeImage GdipGetImageWidth GdipGetImageHeight GdipImageGetFrameDimensionsCount GdipImageGetFrameDimensionsList GdipImageGetFrameCount GdipImageSelectActiveFrame GdipGetPropertyItemSize GdipGetPropertyItem GdipCreateBitmapFromFile GdipCreateBitmapFromFileICM GdipCreateBitmapFromScan0 GdipBitmapLockBits GdipBitmapUnlockBits GdipBitmapGetPixel GdipGetImageGraphicsContext GdiplusShutdown GdipDrawImageRectRectI GdipSetInterpolationMode

msvfw32

DrawDibClose DrawDibOpen

comctl32

ord17 _TrackMouseEvent

kernel32

lstrcmpA GetThreadLocale FlushFileBuffers LockFile UnlockFile SetEndOfFile FindClose FindFirstFileA GetVolumeInformationA GetFullPathNameA InterlockedIncrement InterlockedExchange GetLocaleInfoA EnumResourceLanguagesA ConvertDefaultLocale GetPrivateProfileIntA FindNextFileA FileTimeToSystemTime FileTimeToLocalFileTime LocalFileTimeToFileTime SystemTimeToFileTime SetFileTime SetFileAttributesA GetFileAttributesA GetFileSizeEx GetFileTime GetModuleHandleW LocalAlloc TlsGetValue GlobalHandle TlsAlloc TlsSetValue LocalReAlloc TlsFree GlobalFlags GetCPInfo GetOEMCP SetErrorMode GetTickCount RtlUnwind GetSystemTimeAsFileTime RaiseException TerminateProcess UnhandledExceptionFilter IsDebuggerPresent SetEnvironmentVariableA HeapReAlloc GetDriveTypeA RemoveDirectoryA GetCommandLineA GetStartupInfoA ExitProcess VirtualProtect VirtualAlloc GetSystemInfo HeapSize GetTimeZoneInformation GetACP IsValidCodePage SetHandleCount GetFileType LCMapStringA LCMapStringW VirtualFree HeapCreate GetConsoleCP GetConsoleMode GetStringTypeA GetStringTypeW FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter InitializeCriticalSectionAndSpinCount SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW CreateFileW CompareStringW InterlockedDecrement GetModuleFileNameW GetCurrentThreadId GlobalGetAtomNameA GlobalAddAtomA GlobalFindAtomA GlobalDeleteAtom CompareStringA lstrcmpW GetVersionExA SetLastError MulDiv GetCurrentProcessId CreateMutexA ReleaseMutex GlobalUnlock GetPrivateProfileStringA WritePrivateProfileStringA FreeResource GlobalReAlloc lstrlenA DuplicateHandle GetStdHandle ReadFile HeapFree GetProcessHeap HeapAlloc GlobalAlloc GlobalLock GlobalFree WaitForSingleObject Sleep LeaveCriticalSection EnterCriticalSection DeleteCriticalSection InitializeCriticalSection lstrcpynA FreeLibrary GetWindowsDirectoryA GetShortPathNameA CreateDirectoryA CopyFileA GetCurrentDirectoryA SetFilePointer OutputDebugStringA GetCurrentThread IsBadWritePtr LoadLibraryA GetProcAddress GetCurrentProcess WriteFile VirtualQuery GetModuleFileNameA GetModuleHandleA SetUnhandledExceptionFilter GetLastError FormatMessageA LocalFree DeleteFileA MultiByteToWideChar GetSystemDirectoryA CreateFileA GetFileSize CloseHandle WideCharToMultiByte FindResourceA LoadResource LockResource SizeofResource

user32

UnhookWindowsHookEx GetTopWindow EndDeferWindowPos BeginDeferWindowPos GetLastActivePopup GetForegroundWindow RemovePropA GetPropA SetPropA GetClassLongA CallNextHookEx SetWindowsHookExA GetCapture IsChild WinHelpA ModifyMenuA GetMenuCheckMarkDimensions SetMenuItemBitmaps GetWindowThreadProcessId GetMenuItemInfoA DestroyMenu CharUpperA CharNextA PostQuitMessage ValidateRect ShowOwnedPopups MapDialogRect SetWindowContextHelpId TranslateAcceleratorA BringWindowToTop SetRectEmpty InsertMenuItemA LoadAcceleratorsA LoadMenuA ReuseDDElParam UnpackDDElParam GetSysColorBrush UnregisterClassA CopyAcceleratorTableA IsRectEmpty InvalidateRgn GetNextDlgGroupItem MessageBeep RegisterClipboardFormatA PostThreadMessageA SetForegroundWindow CreateWindowExA GetClassInfoExA GetClassInfoA RegisterClassA AdjustWindowRectEx DeferWindowPos DefWindowProcA GetMenu IntersectRect GetWindowPlacement GetActiveWindow SetActiveWindow CreateDialogIndirectParamA DestroyWindow GetNextDlgTabItem EndDialog EndPaint BeginPaint GetWindowDC GetWindowTextLengthA GetFocus SetWindowPos SetFocus IsWindowEnabled MoveWindow GetDlgCtrlID GetMessageTime IsDialogMessageA SendDlgItemMessageA GetDlgItem GetWindow GetMenuState GetMenuItemID GetSubMenu GetMessageA ReleaseDC GetDC IsWindow UpdateWindow RegisterWindowMessageA TranslateMessage DispatchMessageA PeekMessageA EnumChildWindows GetWindowTextA IsWindowVisible DestroyIcon GetSystemMetrics LoadIconA ScreenToClient IsIconic GetSystemMenu EnableMenuItem CheckMenuItem DrawIcon SetRect GetCursorPos GetDesktopWindow SetWindowLongA CallWindowProcA wvsprintfA wsprintfA MessageBoxA GrayStringA DrawTextExA DrawTextA TabbedTextOutA KillTimer SetTimer GetKeyState GetParent GetWindowLongA WindowFromPoint ClientToScreen GetMenuItemCount AppendMenuA CreatePopupMenu FrameRect InflateRect ReleaseCapture LoadImageA SystemParametersInfoA GetCursor SetCursor GetClassNameA LoadCursorA GetMessagePos MapWindowPoints SetCapture GetClientRect SetWindowRgn PostMessageA FillRect LoadBitmapA EqualRect PtInRect CopyRect EnableWindow GetSysColor InvalidateRect GetWindowRect OffsetRect TrackPopupMenu SetWindowTextA SetMenu SendMessageA ShowWindow

gdi32

CreateFontIndirectA GetTextExtentPoint32A CreateSolidBrush DeleteObject SetStretchBltMode SetViewportOrgEx StretchDIBits GetDeviceCaps GetDIBits RealizePalette SelectPalette CreateDIBitmap CreateBitmap DeleteDC CreateDIBSection SetDIBitsToDevice ExtSelectClipRgn CreateRectRgnIndirect GetClipBox SetBkColor SetWinMetaFileBits DeleteEnhMetaFile GetStockObject GetPixel StretchBlt GetEnhMetaFileHeader SetEnhMetaFileBits PlayEnhMetaFile Escape ExtTextOutA TextOutA SaveDC RestoreDC SetBkMode SetTextColor BitBlt RectVisible SetTextAlign GetViewportExtEx GetWindowExtEx OffsetViewportOrgEx SetViewportExtEx ScaleViewportExtEx SetWindowExtEx ScaleWindowExtEx CreatePatternBrush GetBkColor GetTextColor GetMapMode GetRgnBox SetMapMode PtVisible GetEnhMetaFilePaletteEntries CreatePalette SelectObject CreateCompatibleDC OffsetRgn CombineRgn CreatePolygonRgn CreateEllipticRgn CreateRectRgn GetObjectA CreateCompatibleBitmap CreateFontA

comdlg32

GetFileTitleA

winspool.drv

OpenPrinterA DocumentPropertiesA ClosePrinter

advapi32

RegQueryValueA RegOpenKeyA RegDeleteValueA RegDeleteKeyA RegCreateKeyExA RegSetValueExA RegQueryValueExA RegOpenKeyExA RegCloseKey RegEnumKeyA

shell32

ShellExecuteA ShellExecuteExA Shell_NotifyIconA SHGetSpecialFolderPathA DragFinish DragQueryFileA

shlwapi

PathFindExtensionA PathRemoveFileSpecW PathStripToRootA PathIsUNCA PathFindFileNameA

oledlg

ord8

ole32

CoRegisterMessageFilter OleFlushClipboard OleIsCurrentClipboard CoRevokeClassObject OleInitialize CoFreeUnusedLibraries OleUninitialize CreateILockBytesOnHGlobal StgCreateDocfileOnILockBytes StgOpenStorageOnILockBytes CoGetClassObject CLSIDFromString CLSIDFromProgID CoInitializeEx CoTaskMemAlloc CoTaskMemFree CoInitialize CoCreateInstance CoUninitialize

oleaut32

SysAllocString SysAllocStringLen SysFreeString SysStringLen SysAllocStringByteLen VariantClear VariantChangeType VariantInit OleCreateFontIndirect VariantCopy SafeArrayDestroy VariantTimeToSystemTime SystemTimeToVariantTime

??0CxFile@@QAE@ABV0@@Z ??0CxFile@@QAE@XZ ??0CxIOFile@@QAE@ABV0@@Z ??0CxIOFile@@QAE@PAU_iobuf@@@Z ??0CxImage@@QAE@ABV0@_N11@Z ??0CxImage@@QAE@K@Z ??0CxImage@@QAE@KKJJ@Z ??0CxImage@@QAE@PAEHH@Z ??0CxImage@@QAE@PAEKK@Z ??0CxImage@@QAE@PAU_iobuf@@K@Z ??0CxImage@@QAE@PAVCxFile@@K@Z ??0CxImage@@QAE@PBDK@Z ??0CxMemFile@@QAE@ABV0@@Z ??0CxMemFile@@QAE@PAEK@Z ??1CxFile@@UAE@XZ ??1CxIOFile@@UAE@XZ ??1CxImage@@UAE@XZ ??1CxMemFile@@UAE@XZ ??4CxFile@@QAEAAV0@ABV0@@Z ??4CxIOFile@@QAEAAV0@ABV0@@Z ??4CxImage@@QAEAAV0@ABV0@@Z ??4CxMemFile@@QAEAAV0@ABV0@@Z ??_7CxFile@@6B@ ??_7CxIOFile@@6B@ ??_7CxImage@@6B@ ??_7CxMemFile@@6B@ ??_FCxIOFile@@QAEXXZ ??_FCxImage@@QAEXXZ ??_FCxMemFile@@QAEXXZ ??_OCxImage@@QAEXAAV0@@Z ?Alloc@CxMemFile@@IAEXK@Z ?Bitfield2RGB@CxImage@@IAEXPAEGGGE@Z ?BlendPalette@CxImage@@QAEXKJ@Z ?Clear@CxImage@@QAEXE@Z ?Close@CxIOFile@@UAE_NXZ ?Close@CxMemFile@@UAE_NXZ ?CompareColors@CxImage@@KAHPBX0@Z ?Copy@CxImage@@QAEXABV1@_N11@Z ?CopyInfo@CxImage@@IAEXABV1@@Z ?CopyToHandle@CxImage@@QAEPAXXZ ?Create@CxImage@@QAEPAXKKJJ@Z ?CreateFromHANDLE@CxImage@@QAE_NPAX@Z ?CreateFromHBITMAP@CxImage@@QAEXPAUHBITMAP__@@@Z ?Crop@CxImage@@QAE_NABUtagRECT@@PAV1@@Z ?Crop@CxImage@@QAE_NJJJJPAV1@@Z ?Decode@CxImage@@QAE_NPAEKK@Z ?Decode@CxImage@@QAE_NPAU_iobuf@@K@Z ?Decode@CxImage@@QAE_NPAVCxFile@@K@Z ?DecreaseBpp@CxImage@@QAE_NK_NPAUtagRGBQUAD@@@Z ?Destroy@CxImage@@QAEXXZ ?Dither@CxImage@@QAE_NJ@Z ?Draw2@CxImage@@QAEJPAUHDC__@@ABUtagRECT@@@Z ?Draw2@CxImage@@QAEJPAUHDC__@@JJJJ@Z ?Draw@CxImage@@QAEJPAUHDC__@@ABUtagRECT@@PAU3@@Z ?Draw@CxImage@@QAEJPAUHDC__@@JJJJPAUtagRECT@@@Z ?Enable@CxImage@@QAEX_N@Z ?Encode@CxImage@@QAE_NAAPAEAAJK@Z ?Encode@CxImage@@QAE_NPAU_iobuf@@K@Z ?Encode@CxImage@@QAE_NPAU_iobuf@@PAPAV1@HK@Z ?Encode@CxImage@@QAE_NPAVCxFile@@K@Z ?Encode@CxImage@@QAE_NPAVCxFile@@PAPAV1@HK@Z ?Eof@CxIOFile@@UAE_NXZ ?Eof@CxMemFile@@UAE_NXZ ?Error@CxIOFile@@UAEJXZ ?Error@CxMemFile@@UAEJXZ ?Flip@CxImage@@QAE_NXZ ?Flush@CxIOFile@@UAE_NXZ ?Flush@CxMemFile@@UAE_NXZ ?Free@CxMemFile@@IAEXXZ ?GetBits@CxImage@@QAEPAEXZ ?GetBpp@CxImage@@QBEGXZ ?GetBuffer@CxMemFile@@QAEPAEXZ ?GetBufferPtr@CxImage@@QAEPAEXZ ?GetC@CxIOFile@@UAEJXZ ?GetC@CxMemFile@@UAEJXZ ?GetColorType@CxImage@@QAEEXZ ?GetDIB@CxImage@@QBEPAXXZ ?GetEffWidth@CxImage@@QBEKXZ ?GetEscape@CxImage@@QBEJXZ ?GetFrame@CxImage@@QBEJXZ ?GetFrameDelay@CxImage@@QBEKXZ ?GetGIFComment@CxImage@@QAEXPAD@Z ?GetGIFDisposalMethod@CxImage@@QAEHXZ ?GetGIFLoop@CxImage@@QAEHXZ ?GetHeight@CxImage@@QBEKXZ ?GetJpegQuality@CxImage@@QBEEXZ ?GetLastError@CxImage@@QAEPADXZ ?GetNearestIndex@CxImage@@QAEEUtagRGBQUAD@@@Z ?GetNumColors@CxImage@@QBEKXZ ?GetNumFrames@CxImage@@QBEJXZ ?GetOffset@CxImage@@QAEXPAJ0@Z ?GetPalette@CxImage@@QBEPAUtagRGBQUAD@@XZ ?GetPaletteColor@CxImage@@QAE?AUtagRGBQUAD@@E@Z ?GetPaletteSize@CxImage@@QAEKXZ ?GetPixelColor@CxImage@@QAE?AUtagRGBQUAD@@JJ@Z ?GetPixelIndex@CxImage@@QAEEJJ@Z ?GetProgress@CxImage@@QBEJXZ ?GetRGB@CxImage@@QAE_NHPAE00@Z ?GetSize@CxImage@@QAEJXZ ?GetTransColor@CxImage@@QAE?AUtagRGBQUAD@@XZ ?GetTransIndex@CxImage@@QBEJXZ ?GetType@CxImage@@QBEKXZ ?GetVersion@CxImage@@QAEPBDXZ ?GetWidth@CxImage@@QBEKXZ ?GetXDPI@CxImage@@QBEJXZ ?GetYDPI@CxImage@@QBEJXZ ?Ghost@CxImage@@IAEXPAV1@@Z ?GrayScale@CxImage@@QAE_NXZ ?IncreaseBpp@CxImage@@QAE_NK@Z ?IsEnabled@CxImage@@QBE_NXZ ?IsGrayScale@CxImage@@QAE_NXZ ?IsIndexed@CxImage@@QAE_NXZ ?IsInside@CxImage@@QAE_NJJ@Z ?IsLoaded@CxImage@@QAE_NXZ ?IsTransparent@CxImage@@QBE_NXZ ?IsValid@CxImage@@QBE_NXZ ?Load@CxImage@@QAE_NPBDK@Z ?Load@CxImage@@QAE_NPB_WK@Z ?LoadResource@CxImage@@QAE_NPAUHRSRC__@@KPAUHINSTANCE__@@@Z ?MakeBitmap@CxImage@@QAEPAUHBITMAP__@@PAUHDC__@@@Z ?Mirror@CxImage@@QAE_NXZ ?Negative@CxImage@@QAE_NXZ ?Open@CxIOFile@@QAE_NPBD0@Z ?Open@CxMemFile@@QAE_NXZ ?PutC@CxFile@@UAE_NE@Z ?PutC@CxIOFile@@UAE_NE@Z ?PutC@CxMemFile@@UAE_NE@Z ?RGBQUADtoRGB@CxImage@@QAEKUtagRGBQUAD@@@Z ?RGBtoBGR@CxImage@@IAEXPAEH@Z ?RGBtoRGBQUAD@CxImage@@QAE?AUtagRGBQUAD@@K@Z ?Read@CxIOFile@@UAEIPAXII@Z ?Read@CxMemFile@@UAEIPAXII@Z ?Resample@CxImage@@QAE_NJJH@Z ?Rotate180@CxImage@@QAE_NPAV1@@Z ?Rotate@CxImage@@QAE_NMPAV1@@Z ?RotateLeft@CxImage@@QAE_NPAV1@@Z ?RotateRight@CxImage@@QAE_NPAV1@@Z ?Save@CxImage@@QAE_NPBDK@Z ?Save@CxImage@@QAE_NPB_WK@Z ?Seek@CxIOFile@@UAE_NJH@Z ?Seek@CxMemFile@@UAE_NJH@Z ?SetEscape@CxImage@@QAEXJ@Z ?SetFrame@CxImage@@QAEXJ@Z ?SetFrameDelay@CxImage@@QAEXK@Z ?SetGrayPalette@CxImage@@QAEXXZ ?SetJpegQuality@CxImage@@QAEXE@Z ?SetOffset@CxImage@@QAEXJJ@Z ?SetPalette@CxImage@@QAEXKPAE00@Z ?SetPalette@CxImage@@QAEXPAUrgb_color@@K@Z ?SetPalette@CxImage@@QAEXPAUtagRGBQUAD@@K@Z ?SetPaletteIndex@CxImage@@QAEXEEEEE@Z ?SetPaletteIndex@CxImage@@QAEXEK@Z ?SetPaletteIndex@CxImage@@QAEXEUtagRGBQUAD@@@Z ?SetPixelColor@CxImage@@QAEXJJK@Z ?SetPixelColor@CxImage@@QAEXJJUtagRGBQUAD@@@Z ?SetPixelIndex@CxImage@@QAEXJJE@Z ?SetProgress@CxImage@@QAEXJ@Z ?SetStdPalette@CxImage@@QAEXXZ ?SetTransColor@CxImage@@QAEXUtagRGBQUAD@@@Z ?SetTransIndex@CxImage@@QAEXJ@Z ?SetXDPI@CxImage@@QAEXJ@Z ?SetYDPI@CxImage@@QAEXJ@Z ?Size@CxIOFile@@UAEJXZ ?Size@CxMemFile@@UAEJXZ ?Startup@CxImage@@IAEXK@Z ?Stretch@CxImage@@QAEJPAUHDC__@@ABUtagRECT@@@Z ?Stretch@CxImage@@QAEJPAUHDC__@@JJJJ@Z ?SwapIndex@CxImage@@QAEXEE@Z ?Tell@CxIOFile@@UAEJXZ ?Tell@CxMemFile@@UAEJXZ ?Tile@CxImage@@QAEJPAUHDC__@@PAUtagRECT@@@Z ?Transfer@CxImage@@QAEXAAV1@@Z ?Write@CxIOFile@@UAEIPBXII@Z ?Write@CxMemFile@@UAEIPBXII@Z

Sharing

General

Malware Config

Signatures

File Explorer

2026-09-29_3e805da14031a2503525c9f56043b809_amadey_elex_floxif_smoke-loader_stop

gdiplus

msvfw32

comctl32

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

shlwapi

oledlg

ole32

oleaut32

generic