2026-10-01_251d45a220cba47eea3bc8fd1c98fc2a_elex_smoke-loader_wapomi

Sharing

Copy URL Twitter E-mail

General

Target
2026-10-01_251d45a220cba47eea3bc8fd1c98fc2a_elex_smoke-loader_wapomi
Size 243KB
Sample261003-1erm8sff72
SHA256 c41fe651dbebf452e0d4130d548aeb95d94f823cf4279ebb94e741704cda47fd
MD5 251d45a220cba47eea3bc8fd1c98fc2a
SHA1 e910daf8432949a1f7ce4c982cc1a18b9bb2a3e4
SHA512 42244eef0d3c976201f61d81cb73411085a91c6caa315deb88e50432e164644f9a0aea878634a06739b1a70b245df2e9ceada29acd124df98fe10e698087e4c0
SSDEEP 3072:qz14duOvSxCLLT9qCOY4jb1pQzhHKPtOnO6VrVPoVJtCbhVPoVJtCbFy5w4GCH:U14duK5X5mYQydHKPtOnRWehWeQ5S
TLSH
T1BC345A5F7F44801FC890263570D7F390BB7BA5618B07134FA2750A6CBD223E6AE691E9
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-10-01_251d45a220cba47eea3bc8fd1c98fc2a_elex_smoke-loader_wapomi

File Explorer

2026-10-01_251d45a220cba47eea3bc8fd1c98fc2a_elex_smoke-loader_wapomi

.exe 243KB

2026-10-01_251d45a220cba47eea3bc8fd1c98fc2a_elex_smoke-loader_wapomi

IMPHASH 0af9925d510541540a84a0f3211351ad
SHA256 c41fe651dbebf452e0d4130d548aeb95d94f823cf4279ebb94e741704cda47fd
MD5 251d45a220cba47eea3bc8fd1c98fc2a
SHA1 e910daf8432949a1f7ce4c982cc1a18b9bb2a3e4
SHA512 42244eef0d3c976201f61d81cb73411085a91c6caa315deb88e50432e164644f9a0aea878634a06739b1a70b245df2e9ceada29acd124df98fe10e698087e4c0
SSDEEP 3072:qz14duOvSxCLLT9qCOY4jb1pQzhHKPtOnO6VrVPoVJtCbhVPoVJtCbFy5w4GCH:U14duK5X5mYQydHKPtOnRWehWeQ5S
TLSH
T1BC345A5F7F44801FC890263570D7F390BB7BA5618B07134FA2750A6CBD223E6AE691E9
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

245760

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

D:\Developments\Games\SmartSteamEmu\Release\SmartSteamLoader.pdb

kernel32

GetPrivateProfileIntW GetPrivateProfileStringW FindFirstFileW FindClose GetCommandLineW GetModuleFileNameW GetCurrentDirectoryW GetPrivateProfileSectionNamesW GetCurrentProcessId OpenProcess CreateThread CreateProcessW ResumeThread WaitForSingleObject GetExitCodeThread Sleep MultiByteToWideChar GetLastError DecodePointer EncodePointer InterlockedExchange InterlockedCompareExchange GetSystemTimeAsFileTime GetCurrentThreadId GetTickCount QueryPerformanceCounter IsDebuggerPresent SetUnhandledExceptionFilter UnhandledExceptionFilter TerminateProcess GetStartupInfoW HeapSetInformation WideCharToMultiByte OpenFileMappingA CreateSemaphoreW SetEvent CreateEventA MapViewOfFile CreateFileMappingA CloseHandle GetCurrentProcess UnmapViewOfFile

user32

TranslateMessage SendMessageW PostQuitMessage DestroyWindow DispatchMessageW CreateDialogParamW IsDialogMessageW GetMessageW ShowWindow MoveWindow GetDesktopWindow GetWindowRect MessageBoxW

advapi32

RegQueryValueExA RegCloseKey RegSetValueExW RegQueryValueExW RegCreateKeyExA RegOpenKeyExA SetSecurityDescriptorDacl InitializeSecurityDescriptor RegSetValueExA

shell32

CommandLineToArgvW

msvcp100

?_Xlength_error@std@@YAXPBD@Z ?_Xout_of_range@std@@YAXPBD@Z

psapi

GetModuleFileNameExW

wintrust

WinVerifyTrust

msvcr100

memset _CxxThrowException memcpy _wcsicmp _controlfp_s __CxxFrameHandler3 ??3@YAXPAX@Z memmove ??0exception@std@@QAE@ABV01@@Z ?what@exception@std@@UBEPBDXZ ??1exception@std@@UAE@XZ ??0exception@std@@QAE@ABQBD@Z ??2@YAPAXI@Z _wputenv _vswprintf_c_l tolower _wtoi fopen_s fread fclose atoi sprintf_s memchr ??_V@YAXPAX@Z _unlock __dllonexit _lock _onexit _amsg_exit __getmainargs _cexit _exit _XcptFilter _ismbblead exit _acmdln _initterm _initterm_e _configthreadlocale __setusermatherr _commode _fmode __set_app_type _crt_debugger_hook ?terminate@@YAXXZ ?_type_info_dtor_internal_method@type_info@@QAEXXZ _except_handler4_common _invoke_watson

Name

.text

Size

38KB

Virtual Size

37KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

26KB

Virtual Size

25KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

64KB

Virtual Size

64KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

87KB

Virtual Size

87KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

10KB

Virtual Size

10KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

�5D�uN

Size

16KB

Virtual Size

20KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

File Explorer

2026-10-01_251d45a220cba47eea3bc8fd1c98fc2a_elex_smoke-loader_wapomi

kernel32

user32

advapi32

shell32

msvcp100

psapi

wintrust

msvcr100

generic