2026-10-13_de2e034ad769ea2b77efecabc824ca4f_amadey_elex_smoke-loader

General

Target
2026-10-13_de2e034ad769ea2b77efecabc824ca4f_amadey_elex_smoke-loader
Size 542KB
Sample261014-ej4mpsvy3n
SHA256 dff73b519e1e1b94ba176c0f0999c33b3874d445d175fbcee04223fba6b049a3
MD5 de2e034ad769ea2b77efecabc824ca4f
SHA1 94d95b5b64ada7fad834ca64fa5dfd816f3e44e2
SHA512 62e0fb2ade2abe411c0d9f7f9370496fe308f4527e8ca5d1edf953cd70965502e8d490fde05c9ce6f7a9a43df9e94cd45adbabc4e862221e5087da13673b4a49
SSDEEP 3072:hYCw95Du9jyWq/nCfBvyApURWjNqnOISfGhVCGgt2OAg0FuDrBM46SCuWXzh4FIs:hW9ZuJA/CE8onrN0AOnBUtuIIIHmKU
TLSH
T11DC4A1126CD0EB38E47301B03C7F851A357B6D9B4732C9267E4CF7A995366B8429AD23
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-10-13_de2e034ad769ea2b77efecabc824ca4f_amadey_elex_smoke-loader

File Explorer

2026-10-13_de2e034ad769ea2b77efecabc824ca4f_amadey_elex_smoke-loader

.exe 542KB

2026-10-13_de2e034ad769ea2b77efecabc824ca4f_amadey_elex_smoke-loader

IMPHASH a99648a4d417f4130faca9d4625edb8e
SHA256 dff73b519e1e1b94ba176c0f0999c33b3874d445d175fbcee04223fba6b049a3
MD5 de2e034ad769ea2b77efecabc824ca4f
SHA1 94d95b5b64ada7fad834ca64fa5dfd816f3e44e2
SHA512 62e0fb2ade2abe411c0d9f7f9370496fe308f4527e8ca5d1edf953cd70965502e8d490fde05c9ce6f7a9a43df9e94cd45adbabc4e862221e5087da13673b4a49
SSDEEP 3072:hYCw95Du9jyWq/nCfBvyApURWjNqnOISfGhVCGgt2OAg0FuDrBM46SCuWXzh4FIs:hW9ZuJA/CE8onrN0AOnBUtuIIIHmKU
TLSH
T11DC4A1126CD0EB38E47301B03C7F851A357B6D9B4732C9267E4CF7A995366B8429AD23
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

34859

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\s\Squirrel.Windows\build\Release\Win32\StubExecutable.pdb

kernel32

GetModuleFileNameW GetModuleHandleW FindFirstFileW FindNextFileW FindClose CreateProcessW CreateFileW CloseHandle WideCharToMultiByte GetLastError MultiByteToWideChar GetStringTypeW EncodePointer DecodePointer SetLastError InitializeCriticalSectionAndSpinCount SwitchToThread TlsAlloc TlsGetValue TlsSetValue TlsFree GetSystemTimeAsFileTime GetProcAddress EnterCriticalSection LeaveCriticalSection DeleteCriticalSection LCMapStringW GetLocaleInfoW GetCPInfo UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent IsDebuggerPresent GetStartupInfoW QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId InitializeSListHead RtlUnwind RaiseException FreeLibrary LoadLibraryExW ExitProcess GetModuleHandleExW GetStdHandle WriteFile HeapFree HeapAlloc IsValidLocale GetUserDefaultLCID EnumSystemLocalesW HeapReAlloc GetFileType FindFirstFileExW IsValidCodePage GetACP GetOEMCP GetCommandLineA GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW GetProcessHeap SetStdHandle SetFilePointerEx HeapSize FlushFileBuffers GetConsoleCP GetConsoleMode WriteConsoleW

user32

AllowSetForegroundWindow WaitForInputIdle

Sharing

General

Malware Config

Signatures

File Explorer

2026-10-13_de2e034ad769ea2b77efecabc824ca4f_amadey_elex_smoke-loader

kernel32

user32

generic