2026-10-02_f4ae8aa653a2851039f52dae27d83c01_elex_smoke-loader_wapomi

Sharing

Copy URL Twitter E-mail

General

Target
2026-10-02_f4ae8aa653a2851039f52dae27d83c01_elex_smoke-loader_wapomi
Size 45KB
Sample261002-2epdjsvalf
SHA256 ad1fe57b03c91c670f77097235378f6b8d171a3cb0b25c4ab76de5e48f289032
MD5 f4ae8aa653a2851039f52dae27d83c01
SHA1 934aa43f7822d05f60a6f633036c0740be426d2e
SHA512 eeaef2c0c9bc6a5406b3b14759a9ad43faa4ab369391999cdaac66dd6e383d12ddcacccb6dd0758557ecbdd89982bb36d8b795d019a0bff68a6f61910cf9bda7
SSDEEP 768:OrKwOi0dzM061VDuyEE6ZkRFSLQGPL4vzZq2o9W7GsxBbPr:Or4i0hMHD8P+ssGCq2iW7z
TLSH
T13A233A5197E44539F0F72A3066B52A120F7ABD309E71D3CF969089AA28B9BD0DD70723
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-10-02_f4ae8aa653a2851039f52dae27d83c01_elex_smoke-loader_wapomi

File Explorer

2026-10-02_f4ae8aa653a2851039f52dae27d83c01_elex_smoke-loader_wapomi

.exe 45KB

2026-10-02_f4ae8aa653a2851039f52dae27d83c01_elex_smoke-loader_wapomi

IMPHASH 662b49aadf6d088e6326ef93f7c9f456
SHA256 ad1fe57b03c91c670f77097235378f6b8d171a3cb0b25c4ab76de5e48f289032
MD5 f4ae8aa653a2851039f52dae27d83c01
SHA1 934aa43f7822d05f60a6f633036c0740be426d2e
SHA512 eeaef2c0c9bc6a5406b3b14759a9ad43faa4ab369391999cdaac66dd6e383d12ddcacccb6dd0758557ecbdd89982bb36d8b795d019a0bff68a6f61910cf9bda7
SSDEEP 768:OrKwOi0dzM061VDuyEE6ZkRFSLQGPL4vzZq2o9W7GsxBbPr:Or4i0hMHD8P+ssGCq2iW7z
TLSH
T13A233A5197E44539F0F72A3066B52A120F7ABD309E71D3CF969089AA28B9BD0DD70723
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

69632

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

e:\github\libusbk\libusbk\bin\exe\i386\dpscat.pdb

advapi32

CryptDestroyKey CryptGenKey CryptAcquireContextW CryptReleaseContext

kernel32

OutputDebugStringA WriteConsoleW WriteFile GetStdHandle LockResource LoadResource SizeofResource FindResourceA FindNextFileW FindFirstFileW SetLastError GetLastError GetCurrentDirectoryW GetNativeSystemInfo LocalFree FreeConsole SetConsoleCursorPosition ReadConsoleOutputCharacterW GetConsoleScreenBufferInfo AttachConsole GetCommandLineW HeapAlloc HeapCreate HeapDestroy HeapFree GetVersionExW LoadLibraryA GetModuleHandleA VerifyVersionInfoW VerSetConditionMask FormatMessageW GetProcAddress CloseHandle CreateFileW GetFileAttributesW UnhandledExceptionFilter GetCurrentProcess TerminateProcess GetSystemTimeAsFileTime GetCurrentProcessId GetCurrentThreadId GetTickCount QueryPerformanceCounter SetUnhandledExceptionFilter RtlUnwind GetStartupInfoW InterlockedCompareExchange Sleep InterlockedExchange

user32

wsprintfW

msvcrt

exit _wcmdln _initterm _amsg_exit __setusermatherr __p__commode __p__fmode __set_app_type ?terminate@@YAXXZ _controlfp _XcptFilter _wcslwr _cexit __wgetmainargs _errno malloc free mbstowcs wcstombs _wcsnset memset _wcsicmp _wfopen fwrite _snwprintf fflush fclose _vsnwprintf wcstoul _wcsnicmp _exit

setupapi

SetupFindNextLine SetupGetStringFieldW SetupDiGetActualSectionToInstallExW SetupCloseInfFile SetupFindNextMatchLineW SetupOpenInfFileW SetupFindFirstLineW

shlwapi

PathMatchSpecW PathRelativePathToW PathRemoveFileSpecW PathAppendW PathStripPathW PathFileExistsW

shell32

CommandLineToArgvW

Sharing

General

Malware Config

Signatures

File Explorer

2026-10-02_f4ae8aa653a2851039f52dae27d83c01_elex_smoke-loader_wapomi

advapi32

kernel32

user32

msvcrt

setupapi

shlwapi

shell32

generic