2026-10-14_72e3a0e513944f8b1e915c2f99ec48d6_elex_smoke-loader_stop

General

Target
2026-10-14_72e3a0e513944f8b1e915c2f99ec48d6_elex_smoke-loader_stop
Size 1.0MB
Sample261014-xv4e7a1shx
SHA256 b810bcd4530def2032e9fdf388e15ad8951a27a177a4eafbeca428f89fe6ae9e
MD5 72e3a0e513944f8b1e915c2f99ec48d6
SHA1 3a24185c75789b4ccd9542a0c3b0fddbcebc6ff0
SHA512 93a0bf390f97111b1efc94aad72be18e2f8e36256e60e4ab8f590ff8d3a1b64c11926eacdcb04d044c10a3294d406c2e67fcc9201c51bb5cf7279ed391602a59
SSDEEP 24576:Ut/cEhMieSL/Wvee9jYFNZ+rSrpUqkLsxJ:UN9MiHL/iiLONqkUJ
TLSH
T128250211BBD3C637DD9202BA4896836F46FAB4066F6686C3F7C10E6ECF205C19A35355
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-10-14_72e3a0e513944f8b1e915c2f99ec48d6_elex_smoke-loader_stop

File Explorer

2026-10-14_72e3a0e513944f8b1e915c2f99ec48d6_elex_smoke-loader_stop

.exe 1.0MB

2026-10-14_72e3a0e513944f8b1e915c2f99ec48d6_elex_smoke-loader_stop

IMPHASH 48dae12303389928de6040e466bd6370
SHA256 b810bcd4530def2032e9fdf388e15ad8951a27a177a4eafbeca428f89fe6ae9e
MD5 72e3a0e513944f8b1e915c2f99ec48d6
SHA1 3a24185c75789b4ccd9542a0c3b0fddbcebc6ff0
SHA512 93a0bf390f97111b1efc94aad72be18e2f8e36256e60e4ab8f590ff8d3a1b64c11926eacdcb04d044c10a3294d406c2e67fcc9201c51bb5cf7279ed391602a59
SSDEEP 24576:Ut/cEhMieSL/Wvee9jYFNZ+rSrpUqkLsxJ:UN9MiHL/iiLONqkUJ
TLSH
T128250211BBD3C637DD9202BA4896836F46FAB4066F6686C3F7C10E6ECF205C19A35355
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

109592

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

d:\src\Steam2\Projects\GazelleProto\Tools\WriteMiniDump\vc80_release_static\WriteMiniDump.pdb

kernel32

GetModuleHandleA InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection DebugBreak FormatMessageA FindNextFileA InterlockedDecrement FindClose CreateDirectoryA FindFirstFileA GetLongPathNameA SetFileAttributesA Sleep DeleteFileA RemoveDirectoryA GetFileAttributesA GetCurrentProcess GetProcAddress LoadLibraryA GetSystemInfo GetVersionExA GetConsoleWindow OpenProcess WaitForSingleObject GetCurrentThreadId GetCurrentProcessId GetTempPathA RaiseException WriteConsoleW GetConsoleOutputCP WriteConsoleA SetStdHandle GetTimeZoneInformation CompareStringW CompareStringA GetFullPathNameA GetCommandLineA CreateProcessA CreateFileA GetFileInformationByHandle CreateFileMappingA MapViewOfFile GetACP WideCharToMultiByte GetLastError CloseHandle GetModuleFileNameA UnmapViewOfFile GetCurrentDirectoryA SetCurrentDirectoryA GetLocaleInfoW SetFilePointer FlushFileBuffers IsValidLocale EnumSystemLocalesA GetUserDefaultLCID InterlockedIncrement InterlockedExchange MultiByteToWideChar HeapFree TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlUnwind ExitProcess FileTimeToSystemTime FileTimeToLocalFileTime GetDriveTypeA HeapAlloc GetSystemTimeAsFileTime GetProcessHeap LCMapStringA LCMapStringW GetCPInfo GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError HeapDestroy HeapCreate VirtualFree VirtualAlloc HeapReAlloc WriteFile GetStdHandle HeapSize ReadFile GetConsoleCP GetConsoleMode SetEnvironmentVariableA SetEnvironmentVariableW FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetTickCount GetLocaleInfoA GetStringTypeA GetStringTypeW

user32

MessageBoxA wsprintfA

shell32

SHGetFileInfoA

version

GetFileVersionInfoA GetFileVersionInfoSizeA VerQueryValueA

Sharing

General

Malware Config

Signatures

File Explorer

2026-10-14_72e3a0e513944f8b1e915c2f99ec48d6_elex_smoke-loader_stop

kernel32

user32

shell32

version

generic