2026-10-18_306bc68ae0fba384d89a9dc8cedb8279_elex_smoke-loader_wapomi

General

Target
2026-10-18_306bc68ae0fba384d89a9dc8cedb8279_elex_smoke-loader_wapomi
Size 26KB
Sample261018-tplfmsbg33
SHA256 03f3320a9c74db9898349ba0c7d5cc3ede38a14ed2b3396f72485e2d971bb97c
MD5 306bc68ae0fba384d89a9dc8cedb8279
SHA1 3e2ba529ad6545be65a8da760905ed2878227edb
SHA512 f4371d00e0bcd1204d14ef1b98bee25dfa1fe7401695e5f7259861d2f327160e5acbec18d918e143f62a136b90df5fe87f58a823a320430e4dae8cd220752c33
SSDEEP 768:XdNNTGIZ734ghQGPL4vzZq2o9W7GsxBbPr:XvNT3JGGCq2iW7z
TLSH
T1B0C2CF83DFC044F3C5CD6AB510733A9BCABBD6318FB162A7937688629928545AC214DE
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-10-18_306bc68ae0fba384d89a9dc8cedb8279_elex_smoke-loader_wapomi

File Explorer

2026-10-18_306bc68ae0fba384d89a9dc8cedb8279_elex_smoke-loader_wapomi

.exe 26KB

2026-10-18_306bc68ae0fba384d89a9dc8cedb8279_elex_smoke-loader_wapomi

IMPHASH f18af7e6a402d35ac0dc2f46b78978b1
SHA256 03f3320a9c74db9898349ba0c7d5cc3ede38a14ed2b3396f72485e2d971bb97c
MD5 306bc68ae0fba384d89a9dc8cedb8279
SHA1 3e2ba529ad6545be65a8da760905ed2878227edb
SHA512 f4371d00e0bcd1204d14ef1b98bee25dfa1fe7401695e5f7259861d2f327160e5acbec18d918e143f62a136b90df5fe87f58a823a320430e4dae8cd220752c33
SSDEEP 768:XdNNTGIZ734ghQGPL4vzZq2o9W7GsxBbPr:XvNT3JGGCq2iW7z
TLSH
T1B0C2CF83DFC044F3C5CD6AB510733A9BCABBD6318FB162A7937688629928545AC214DE
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

24576

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

D:\a\1\s\Win32\Release\plist_cmp.pdb

plist

plist_from_xml plist_free plist_from_bin plist_compare_node_value

vcruntime140

__current_exception _except_handler4_common __current_exception_context memset

api-ms-win-crt-heap-l1-1-0

_set_new_mode malloc free

api-ms-win-crt-stdio-l1-1-0

__acrt_iob_func __p__commode _set_fmode fread fclose fopen __stdio_common_vfprintf

api-ms-win-crt-filesystem-l1-1-0

_stat64i32

api-ms-win-crt-runtime-l1-1-0

__p___argc __p___argv _cexit _c_exit _register_thread_local_exe_atexit_callback _initterm_e _get_initial_narrow_environment _initialize_narrow_environment exit _initialize_onexit_table _register_onexit_function _crt_atexit _controlfp_s terminate _configure_narrow_argv _set_app_type _seh_filter_exe _exit _initterm

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

kernel32

TerminateProcess GetModuleHandleW IsDebuggerPresent InitializeSListHead GetCurrentProcess SetUnhandledExceptionFilter UnhandledExceptionFilter IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetCurrentThreadId

Name

.text

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

3KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

904B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

512B

Virtual Size

480B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

512B

Virtual Size

372B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

�t��uQ

Size

16KB

Virtual Size

20KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

File Explorer

2026-10-18_306bc68ae0fba384d89a9dc8cedb8279_elex_smoke-loader_wapomi

plist

vcruntime140

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-filesystem-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-locale-l1-1-0

kernel32

generic