2026-10-19_6b7df589cfb26df17ff4572fede487a8_amadey_elex_smoke-loader

General

Target
2026-10-19_6b7df589cfb26df17ff4572fede487a8_amadey_elex_smoke-loader
Size 316KB
Sample261020-vybs8stz6r
SHA256 2b6e162ceb2863368a4a788b878ce02f7a5c16c9e46a6ff10b324241ccaabea9
MD5 6b7df589cfb26df17ff4572fede487a8
SHA1 e070283584ebed8be5e496e84a9273206812a1ef
SHA512 a20fb1c27f4f42c49a5c27081c083d7e62fa7507388e90c9f89b1ceff8dcc4c45243524fb4e0eb89b088748b4f3c9ce837d81575b509dc9bfa780f8a62ffc03e
SSDEEP 3072:wPjIVzyjMC/DyRR3f+OXZqGmSzfV0HRh9QypL8zwX0JXjwgob5/l:wPkk/DyS/bSzfiXT8wX0JI
TLSH
T1A8647C1276C0D07BDE6300B14FDA5B3B9EE6A5A40F714ACB63C9DA0C9B319D2D532B19
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-10-19_6b7df589cfb26df17ff4572fede487a8_amadey_elex_smoke-loader

File Explorer

2026-10-19_6b7df589cfb26df17ff4572fede487a8_amadey_elex_smoke-loader

.exe 316KB

2026-10-19_6b7df589cfb26df17ff4572fede487a8_amadey_elex_smoke-loader

IMPHASH 0487c1a777dab898bfb712706bd44526
SHA256 2b6e162ceb2863368a4a788b878ce02f7a5c16c9e46a6ff10b324241ccaabea9
MD5 6b7df589cfb26df17ff4572fede487a8
SHA1 e070283584ebed8be5e496e84a9273206812a1ef
SHA512 a20fb1c27f4f42c49a5c27081c083d7e62fa7507388e90c9f89b1ceff8dcc4c45243524fb4e0eb89b088748b4f3c9ce837d81575b509dc9bfa780f8a62ffc03e
SSDEEP 3072:wPjIVzyjMC/DyRR3f+OXZqGmSzfV0HRh9QypL8zwX0JXjwgob5/l:wPkk/DyS/bSzfiXT8wX0JI
TLSH
T1A8647C1276C0D07BDE6300B14FDA5B3B9EE6A5A40F714ACB63C9DA0C9B319D2D532B19
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

140590

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\Repos\vbdecomp\build\matching\gui-base-verification\gui-base-runner-vc7.pdb

user32

PtInRect OffsetRect SetRect

kernel32

GetCurrentThreadId SetEnvironmentVariableA SetEndOfFile GetLocaleInfoW InterlockedDecrement InterlockedIncrement WideCharToMultiByte Sleep InterlockedExchange InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection GetLocaleInfoA MultiByteToWideChar HeapFree RtlUnwind RaiseException GetModuleHandleA GetCommandLineA GetVersionExA LCMapStringA GetLastError LCMapStringW GetCPInfo FatalAppExitA HeapAlloc HeapReAlloc ExitProcess GetTimeFormatA GetDateFormatA CompareStringA CompareStringW GetStringTypeA GetStringTypeW ReadFile WriteFile HeapDestroy HeapCreate VirtualFree VirtualAlloc IsBadWritePtr GetProcAddress TlsFree SetLastError TlsSetValue TlsGetValue GetCurrentThread TlsAlloc SetUnhandledExceptionFilter SetFilePointer SetHandleCount GetStdHandle GetFileType GetStartupInfoA CloseHandle TerminateProcess GetCurrentProcess HeapSize GetModuleFileNameA UnhandledExceptionFilter FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW VirtualProtect GetSystemInfo VirtualQuery GetUserDefaultLCID EnumSystemLocalesA IsValidLocale IsValidCodePage QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime IsBadReadPtr IsBadCodePtr FlushFileBuffers SetConsoleCtrlHandler GetTimeZoneInformation SetStdHandle GetACP GetOEMCP CreateFileA LoadLibraryA

Sharing

General

Malware Config

Signatures

File Explorer

2026-10-19_6b7df589cfb26df17ff4572fede487a8_amadey_elex_smoke-loader

user32

kernel32

generic