2026-10-01_992c64c3287a2cf75e6c28e2ff96cd32_amadey_elex_smoke-loader

General

Target
2026-10-01_992c64c3287a2cf75e6c28e2ff96cd32_amadey_elex_smoke-loader
Size 834KB
Sample261002-j2jgpsdd74
SHA256 f5be3250f59cfd5affe6deee228ca77e95aaa89e305d461299ca4d695e94af95
MD5 992c64c3287a2cf75e6c28e2ff96cd32
SHA1 7e0828746ac36501608162412c3668c5f7d66b6f
SHA512 bed8db8aed0218887614c854c165514fff17302143776b6ebfcdfb86e519b385a8fb87c852cf9d897353e2f578ae4e1571054bcf9abd3fdec7a63c021dc5dafe
SSDEEP 12288:thK1SdO8OAHZYZVCG86XhMfL7I5ki7V0mvqBJKjF16Aa+q6DrTbVAMPzQj:thK1nzAHar97XhzvhvvcAa+IM8
TLSH
T1E405F211B7A4C039F1F756F55975A378BA2EBDA1A72090CB12C927EA56347E0EC3070B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-10-01_992c64c3287a2cf75e6c28e2ff96cd32_amadey_elex_smoke-loader

File Explorer

2026-10-01_992c64c3287a2cf75e6c28e2ff96cd32_amadey_elex_smoke-loader

.exe 834KB

2026-10-01_992c64c3287a2cf75e6c28e2ff96cd32_amadey_elex_smoke-loader

IMPHASH 6d58d46cb4da553c2a028fd56457c4dc
SHA256 f5be3250f59cfd5affe6deee228ca77e95aaa89e305d461299ca4d695e94af95
MD5 992c64c3287a2cf75e6c28e2ff96cd32
SHA1 7e0828746ac36501608162412c3668c5f7d66b6f
SHA512 bed8db8aed0218887614c854c165514fff17302143776b6ebfcdfb86e519b385a8fb87c852cf9d897353e2f578ae4e1571054bcf9abd3fdec7a63c021dc5dafe
SSDEEP 12288:thK1SdO8OAHZYZVCG86XhMfL7I5ki7V0mvqBJKjF16Aa+q6DrTbVAMPzQj:thK1nzAHar97XhzvhvvcAa+IM8
TLSH
T1E405F211B7A4C039F1F756F55975A378BA2EBDA1A72090CB12C927EA56347E0EC3070B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

629920

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\goxi\kogopisacoz79-wezutivotuv_juguw.pdb

kernel32

GetConsoleAliasesLengthW TlsGetValue CommConfigDialogA SetWaitableTimer SetDllDirectoryW InterlockedIncrement _lwrite ZombifyActCtx GetSystemWindowsDirectoryW GetNamedPipeHandleStateA GetProfileSectionA FreeEnvironmentStringsA GetTickCount CreateNamedPipeW ConvertFiberToThread GetSystemTimeAsFileTime GetPrivateProfileStringW GetWindowsDirectoryA GetSystemWow64DirectoryA QueryActCtxW CreateActCtxW GetSystemTimes GetDriveTypeA GetConsoleMode ReadConsoleInputA SetVolumeMountPointA GetVersionExW HeapCreate HeapValidate GetVolumePathNamesForVolumeNameW IsDBCSLeadByte GetModuleFileNameW CompareStringW lstrlenA VerifyVersionInfoW FindFirstFileExA GetHandleInformation GetLastError SetLastError GetProcAddress GetLongPathNameA SetFirmwareEnvironmentVariableW CopyFileA GetConsoleDisplayMode FindClose GetPrivateProfileStringA LoadLibraryA LocalAlloc IsWow64Process WritePrivateProfileStringA IsSystemResumeAutomatic SetCurrentDirectoryW SetFileApisToANSI GetModuleFileNameA GetOEMCP WriteProfileStringA GetModuleHandleA GetProcessShutdownParameters CreateWaitableTimerW BuildCommDCBA GetConsoleCursorInfo TlsAlloc FileTimeToLocalFileTime ReadConsoleOutputCharacterW FlushFileBuffers CloseHandle GetStartupInfoW GetComputerNameA DeleteFileA GetCommandLineA HeapSetInformation SetUnhandledExceptionFilter QueryPerformanceCounter GetCurrentThreadId GetCurrentProcessId InterlockedDecrement DecodePointer GetModuleHandleW ExitProcess FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetStdHandle InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection IsBadReadPtr EncodePointer TlsSetValue TlsFree WriteFile TerminateProcess GetCurrentProcess UnhandledExceptionFilter IsDebuggerPresent GetACP GetCPInfo IsValidCodePage EnterCriticalSection LeaveCriticalSection LoadLibraryW HeapAlloc HeapReAlloc HeapSize HeapQueryInformation HeapFree RtlUnwind RaiseException OutputDebugStringA WriteConsoleW OutputDebugStringW LCMapStringW MultiByteToWideChar GetStringTypeW IsProcessorFeaturePresent SetFilePointer GetConsoleCP SetStdHandle CreateFileW

user32

GetComboBoxInfo

gdi32

GetBitmapBits

Sharing

General

Malware Config

Signatures

File Explorer

2026-10-01_992c64c3287a2cf75e6c28e2ff96cd32_amadey_elex_smoke-loader

kernel32

user32

gdi32

generic