2026-10-19_60022c0c9cb1e506e03f8b1cf394c773_amadey_elex_smoke-loader

Sharing

Copy URL Twitter E-mail

General

Target
2026-10-19_60022c0c9cb1e506e03f8b1cf394c773_amadey_elex_smoke-loader
Size 440KB
Sample261020-xj55msg17k
SHA256 d448c77b002d9de98414b58e6468cf54f6b1100ffc731a334e0106ae63443309
MD5 60022c0c9cb1e506e03f8b1cf394c773
SHA1 cff61aaa692e3e1af55bfeeb7400aa7f543227cd
SHA512 93ac87b7d255655be9a62cca04b0bcb7a840a8fc961039655b9f1dc1801f4f4890ebf016e66a4a600bf4013cd5dbac2f7a6bc096ff4d853fa55cff218c20b376
SSDEEP 6144:LlclxvpVjC571pLep+j9T1t+PJ+Bm0sBQeewQee3QeesQeegeQeefQee5g5/sWWY:Jeg71hep+xBt+PUBn5/ssmXoGgKX
TLSH
T1D4A48D11B2F3D0B4D8834771095D6ABEB26BDA064B604DC3E7DCCE1E2F215D5A23A25B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-10-19_60022c0c9cb1e506e03f8b1cf394c773_amadey_elex_smoke-loader

File Explorer

2026-10-19_60022c0c9cb1e506e03f8b1cf394c773_amadey_elex_smoke-loader

.exe 440KB

2026-10-19_60022c0c9cb1e506e03f8b1cf394c773_amadey_elex_smoke-loader

IMPHASH 7a33ccf0340ac18f0bfa95205a8bba30
SHA256 d448c77b002d9de98414b58e6468cf54f6b1100ffc731a334e0106ae63443309
MD5 60022c0c9cb1e506e03f8b1cf394c773
SHA1 cff61aaa692e3e1af55bfeeb7400aa7f543227cd
SHA512 93ac87b7d255655be9a62cca04b0bcb7a840a8fc961039655b9f1dc1801f4f4890ebf016e66a4a600bf4013cd5dbac2f7a6bc096ff4d853fa55cff218c20b376
SSDEEP 6144:LlclxvpVjC571pLep+j9T1t+PJ+Bm0sBQeewQee3QeesQeegeQeefQee5g5/sWWY:Jeg71hep+xBt+PUBn5/ssmXoGgKX
TLSH
T1D4A48D11B2F3D0B4D8834771095D6ABEB26BDA064B604DC3E7DCCE1E2F215D5A23A25B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

323060

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\Repos\vbdecomp\build\matching\gui-render-streams-join\streams-join.pdb

d3d8

Direct3DCreate8

winmm

timeGetTime

user32

CreateWindowExA IsWindowVisible DestroyWindow PtInRect OffsetRect SetRect

advapi32

RegQueryValueExA RegCloseKey RegOpenKeyA

kernel32

GetLocaleInfoW LCMapStringW LCMapStringA CompareStringA GetCurrentProcessId GetTickCount VirtualQuery CompareStringW SetEnvironmentVariableA GetSystemTimeAsFileTime GetStdHandle GetModuleHandleA OutputDebugStringA Sleep QueryPerformanceCounter InterlockedIncrement HeapValidate GetProcessHeap InterlockedDecrement DeleteFileA CloseHandle ReadFile CreateFileA GetTempFileNameA GetTempPathA WriteFile LoadLibraryA GetProcAddress GetLastError IsProcessorFeaturePresent GetVersionExA RtlUnwind RaiseException EnterCriticalSection LeaveCriticalSection GetCommandLineA HeapFree HeapAlloc DeleteCriticalSection FatalAppExitA TlsFree SetLastError GetCurrentThreadId TlsSetValue TlsGetValue GetCurrentThread TlsAlloc SetUnhandledExceptionFilter SetHandleCount GetFileType GetStartupInfoA ExitProcess TerminateProcess GetCurrentProcess HeapDestroy HeapCreate VirtualFree VirtualAlloc HeapReAlloc IsBadWritePtr HeapSize GetModuleFileNameA UnhandledExceptionFilter FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetConsoleCtrlHandler GetTimeFormatA GetDateFormatA GetCPInfo GetUserDefaultLCID GetLocaleInfoA EnumSystemLocalesA IsValidLocale IsValidCodePage GetStringTypeA MultiByteToWideChar GetStringTypeW InitializeCriticalSection IsBadReadPtr IsBadCodePtr GetACP GetOEMCP SetFilePointer SetStdHandle FlushFileBuffers GetTimeZoneInformation VirtualProtect GetSystemInfo

Sharing

General

Malware Config

Signatures

File Explorer

2026-10-19_60022c0c9cb1e506e03f8b1cf394c773_amadey_elex_smoke-loader

d3d8

winmm

user32

advapi32

kernel32

generic