2026-10-08_3311767c636ae766819067414be20393_elex_smoke-loader_wapomi

Sharing

Copy URL Twitter E-mail

General

Target
2026-10-08_3311767c636ae766819067414be20393_elex_smoke-loader_wapomi
Size 6.1MB
Sample261009-v8p4lsdb64
SHA256 2d75ec10beb41249d3603a6d2a2050b648756d967767cd4ad89d1971037d1e8b
MD5 3311767c636ae766819067414be20393
SHA1 bbc776d3c8714e9a032371f253515240d6f135c3
SHA512 686619c8bab69e99434b0a5938943b73dc57f6552e93b42dc2b55a60eea2501ced3205a6b5270512ec6431e94afb479c8832f6455cb5045da7cec51cf49b0cb5
SSDEEP 98304:cfwspGAgk35qVBT2nBDIIjVR9fDDN6joExvXqF:cfwIzJ5qVBanBEKT9/6oEYF
TLSH
T104565B03F961A22DDAA718B1C6FDA76DA1E06A1907C461C3D2981D2E9D34DD33BF314E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-10-08_3311767c636ae766819067414be20393_elex_smoke-loader_wapomi

File Explorer

2026-10-08_3311767c636ae766819067414be20393_elex_smoke-loader_wapomi

.exe 6.1MB

2026-10-08_3311767c636ae766819067414be20393_elex_smoke-loader_wapomi

SHA256 2d75ec10beb41249d3603a6d2a2050b648756d967767cd4ad89d1971037d1e8b
MD5 3311767c636ae766819067414be20393
SHA1 bbc776d3c8714e9a032371f253515240d6f135c3
SHA512 686619c8bab69e99434b0a5938943b73dc57f6552e93b42dc2b55a60eea2501ced3205a6b5270512ec6431e94afb479c8832f6455cb5045da7cec51cf49b0cb5
SSDEEP 98304:cfwspGAgk35qVBT2nBDIIjVR9fDDN6joExvXqF:cfwIzJ5qVBanBEKT9/6oEYF
TLSH
T104565B03F961A22DDAA718B1C6FDA76DA1E06A1907C461C3D2981D2E9D34DD33BF314E
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

9916416

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

Name

.text

Size

4.4MB

Virtual Size

4.4MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

605KB

Virtual Size

605KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.data

Size

64KB

Virtual Size

3.1MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

969KB

Virtual Size

968KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.lp89

Size

8KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.lpsd

Size

58KB

Virtual Size

57KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.npcatt

Size

Virtual Size

331KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.enh20

Size

5KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.gbtn

Size

4KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.gbtd

Size

68KB

Virtual Size

72KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

7ǵ��u1

Size

16KB

Virtual Size

20KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

File Explorer

2026-10-08_3311767c636ae766819067414be20393_elex_smoke-loader_wapomi

generic