2026-10-01_0fea22fa87b30323a39410288440499e_amadey_elex_smoke-loader

General

Target
2026-10-01_0fea22fa87b30323a39410288440499e_amadey_elex_smoke-loader
Size 569KB
Sample261002-yn2hpastcz
SHA256 9f04548ad18af83e624743c54ac26a3bf03f3c75f4a1bb6b56274ed80a18654b
MD5 0fea22fa87b30323a39410288440499e
SHA1 ef18476c4c10e5325011d53e8bbe25b8903fdb20
SHA512 b48b27ea230cc8829840c60dbdc88d15f545fe284fe093ebf59f93a31d3b735af1707780511d3855c587da991e8a78d98c90bb5fc69652f4cd4e98a80797a150
SSDEEP 12288:f/wt8vvxnDt8pCstHi23PU8ot59AXkmSp17:34Kv/bst7fUtz3
TLSH
T153C4E010B7A0C038F4B316F899B99379B92E7EA0A77990CF52D517EA56306E0ED30357
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-10-01_0fea22fa87b30323a39410288440499e_amadey_elex_smoke-loader

File Explorer

2026-10-01_0fea22fa87b30323a39410288440499e_amadey_elex_smoke-loader

.exe 569KB

2026-10-01_0fea22fa87b30323a39410288440499e_amadey_elex_smoke-loader

IMPHASH 5bf1109d17f31fdf1287dd3cc8a8bd45
SHA256 9f04548ad18af83e624743c54ac26a3bf03f3c75f4a1bb6b56274ed80a18654b
MD5 0fea22fa87b30323a39410288440499e
SHA1 ef18476c4c10e5325011d53e8bbe25b8903fdb20
SHA512 b48b27ea230cc8829840c60dbdc88d15f545fe284fe093ebf59f93a31d3b735af1707780511d3855c587da991e8a78d98c90bb5fc69652f4cd4e98a80797a150
SSDEEP 12288:f/wt8vvxnDt8pCstHi23PU8ot59AXkmSp17:34Kv/bst7fUtz3
TLSH
T153C4E010B7A0C038F4B316F899B99379B92E7EA0A77990CF52D517EA56306E0ED30357
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

357968

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\wexewotadug-14\suwiwixatihod rifetejihetiy\sakaje\81_dece.pdb

kernel32

_lwrite InterlockedDecrement SetFirmwareEnvironmentVariableA GetNamedPipeHandleStateA SetHandleInformation SetConsoleScreenBufferSize CancelWaitableTimer SetVolumeMountPointW FindFirstFileExW FreeEnvironmentStringsA GetModuleHandleW GetConsoleAliasesLengthA GetSystemTimeAsFileTime GetPrivateProfileStringW ReadConsoleW GetSystemWow64DirectoryA QueryActCtxW CreateActCtxW GetSystemTimes ActivateActCtx GlobalAlloc GlobalFindAtomA LoadLibraryW ReadConsoleInputA SizeofResource GetSystemWindowsDirectoryA SetConsoleMode HeapValidate GetVolumePathNamesForVolumeNameW GetModuleFileNameW GetSystemDirectoryA SetDllDirectoryW GetStartupInfoW VerifyVersionInfoW GetLastError IsDBCSLeadByteEx SetLastError GetProcAddress CreateNamedPipeA IsValidCodePage CopyFileA GlobalGetAtomNameA SearchPathA GetPrivateProfileStringA OpenWaitableTimerA WritePrivateProfileStringA WTSGetActiveConsoleSessionId SetConsoleCursorInfo GetProcessShutdownParameters BuildCommDCBA GetCurrentDirectoryA GetFileTime GetVersionExA GetWindowsDirectoryW FileTimeToLocalFileTime TlsFree GetProfileSectionW CommConfigDialogW LocalFileTimeToFileTime CompareStringW TlsGetValue DeleteFileA GetCommandLineA HeapSetInformation EnterCriticalSection LeaveCriticalSection DecodePointer TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EncodePointer IsProcessorFeaturePresent SetHandleCount GetStdHandle InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection QueryPerformanceCounter GetTickCount GetCurrentThreadId GetCurrentProcessId InterlockedIncrement ExitProcess GetModuleFileNameA FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW IsBadReadPtr TlsAlloc TlsSetValue HeapCreate WriteFile GetACP GetOEMCP GetCPInfo OutputDebugStringA WriteConsoleW OutputDebugStringW RtlUnwind RaiseException SetFilePointer GetConsoleCP GetConsoleMode HeapAlloc HeapReAlloc HeapSize HeapQueryInformation HeapFree FlushFileBuffers GetStringTypeW LCMapStringW MultiByteToWideChar SetStdHandle CloseHandle CreateFileW

user32

GetMessageTime

gdi32

GetBitmapBits

Sharing

General

Malware Config

Signatures

File Explorer

2026-10-01_0fea22fa87b30323a39410288440499e_amadey_elex_smoke-loader

kernel32

user32

gdi32

generic