2026-10-01_87998477f897e02797c61a6f28532ed1_amadey_elex_smoke-loader

General

Target
2026-10-01_87998477f897e02797c61a6f28532ed1_amadey_elex_smoke-loader
Size 846KB
Sample261002-lskdrathpg
SHA256 f9356cb203723cdc76676dc20ada34af67a700063af082c54f099509f3c5325c
MD5 87998477f897e02797c61a6f28532ed1
SHA1 31201bcb183797ff6b2b4923d40df8a3d83636f3
SHA512 0f2098587c8a2f68c048c5175171722eb164dde7869ab980132706143d36d83887a19fb649a641f1c9895afb0c677e54be6dc20684d64ace01b65561423d4405
SSDEEP 12288:I9hBDVouWwlgF02MRRjRWHTM1b5AmLQbTfb9/8oOnTb1oiwu4:QVouWwlgF0pRRjRGO+mUbTfb9fOnKF
TLSH
T18B050100B6A0C035F5F223F949B993A9BA3E7AE1673490CF52D526EE56346D0EC3171B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-10-01_87998477f897e02797c61a6f28532ed1_amadey_elex_smoke-loader

File Explorer

2026-10-01_87998477f897e02797c61a6f28532ed1_amadey_elex_smoke-loader

.exe 846KB

2026-10-01_87998477f897e02797c61a6f28532ed1_amadey_elex_smoke-loader

IMPHASH 4e64f9ca632bad43dfae36762fa75b7a
SHA256 f9356cb203723cdc76676dc20ada34af67a700063af082c54f099509f3c5325c
MD5 87998477f897e02797c61a6f28532ed1
SHA1 31201bcb183797ff6b2b4923d40df8a3d83636f3
SHA512 0f2098587c8a2f68c048c5175171722eb164dde7869ab980132706143d36d83887a19fb649a641f1c9895afb0c677e54be6dc20684d64ace01b65561423d4405
SSDEEP 12288:I9hBDVouWwlgF02MRRjRWHTM1b5AmLQbTfb9/8oOnTb1oiwu4:QVouWwlgF0pRRjRGO+mUbTfb9fOnKF
TLSH
T18B050100B6A0C035F5F223F949B993A9BA3E7AE1673490CF52D526EE56346D0EC3171B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

639904

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\telajumebasoz\bu.pdb

kernel32

SetDllDirectoryW InterlockedIncrement _lwrite ReadConsoleA SetFirmwareEnvironmentVariableA GetSystemWindowsDirectoryW GetNamedPipeHandleStateA GetComputerNameW GetTickCount CreateNamedPipeW GetProcessHeap ConvertFiberToThread GetSystemTimeAsFileTime GetPrivateProfileStringW GetWindowsDirectoryA GetCompressedFileSizeW GetSystemWow64DirectoryA QueryActCtxW CreateActCtxW GetSystemTimes TlsSetValue LoadLibraryW GetConsoleMode ReadConsoleInputA CopyFileW GetVersionExW HeapCreate HeapValidate GetVolumePathNamesForVolumeNameW IsDBCSLeadByte GetModuleFileNameW CompareStringW GetACP SetWaitableTimer VerifyVersionInfoW FindFirstFileExA GetHandleInformation GetLastError GetLongPathNameW SetLastError CopyFileA GetConsoleDisplayMode FindClose GetPrivateProfileStringA LocalAlloc IsWow64Process WritePrivateProfileStringA IsSystemResumeAutomatic SetCurrentDirectoryW SetFileApisToANSI QueryDosDeviceW SetConsoleCursorInfo GetModuleHandleA GetProcessShutdownParameters CreateWaitableTimerW FreeEnvironmentStringsW WriteProfileStringW RequestWakeupLatency BuildCommDCBA VirtualProtect TlsAlloc FileTimeToLocalFileTime CloseHandle CreateFileW FlushFileBuffers GetDriveTypeW CommConfigDialogA GetConsoleAliasesLengthW GetStartupInfoW lstrlenA InterlockedDecrement InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection EncodePointer DecodePointer GetCommandLineW HeapSetInformation IsBadReadPtr RaiseException RtlUnwind IsProcessorFeaturePresent InitializeCriticalSectionAndSpinCount SetUnhandledExceptionFilter QueryPerformanceCounter GetCurrentThreadId GetCurrentProcessId GetProcAddress GetModuleHandleW ExitProcess GetEnvironmentStringsW SetHandleCount GetStdHandle GetFileType TlsGetValue TlsFree WriteFile HeapAlloc GetModuleFileNameA HeapReAlloc HeapSize HeapQueryInformation TerminateProcess GetCurrentProcess UnhandledExceptionFilter IsDebuggerPresent HeapFree GetOEMCP GetCPInfo IsValidCodePage GetStringTypeW MultiByteToWideChar OutputDebugStringA WriteConsoleW OutputDebugStringW WideCharToMultiByte LCMapStringW SetFilePointer GetConsoleCP SetStdHandle

user32

GetCaretBlinkTime GetComboBoxInfo

gdi32

GetBitmapBits

advapi32

SetKernelObjectSecurity AbortSystemShutdownW

Sharing

General

Malware Config

Signatures

File Explorer

2026-10-01_87998477f897e02797c61a6f28532ed1_amadey_elex_smoke-loader

kernel32

user32

gdi32

advapi32

generic