2026-10-21_a20c138c376b37a41afed06970aa7ccf_elex_smoke-loader_stop

General

Target
2026-10-21_a20c138c376b37a41afed06970aa7ccf_elex_smoke-loader_stop
Size 1.0MB
Sample261022-sdxtvsds4x
SHA256 677aa289b72666f9a92ba4ae0ebd22d263f68d73394006f8bb383095ba240046
MD5 a20c138c376b37a41afed06970aa7ccf
SHA1 40e66f3120f2d84a2c8a271ab9062d2342bdffa0
SHA512 79d77a86b4289e4bf696d69dddbb7e9ae336d727c308b493755aa741ecb295217ba0fee8fb07a70493e7b437daed62b5cf30718f30931cbce718a55e63e12800
SSDEEP 24576:at/cEhMxQr61gT7tEuJu1pILcyD7I1mFOtyChUok6ywq2Z02Hg8yjrQ:aN9MYPT7tRIpCcP1IPoO2qk
TLSH
T1B6251211BBD6C237D95202B64881875B9E39B4022F7652CBFBC02F5ECF242D29E3A351
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-10-21_a20c138c376b37a41afed06970aa7ccf_elex_smoke-loader_stop

File Explorer

2026-10-21_a20c138c376b37a41afed06970aa7ccf_elex_smoke-loader_stop

.exe 1.0MB

2026-10-21_a20c138c376b37a41afed06970aa7ccf_elex_smoke-loader_stop

IMPHASH 48dae12303389928de6040e466bd6370
SHA256 677aa289b72666f9a92ba4ae0ebd22d263f68d73394006f8bb383095ba240046
MD5 a20c138c376b37a41afed06970aa7ccf
SHA1 40e66f3120f2d84a2c8a271ab9062d2342bdffa0
SHA512 79d77a86b4289e4bf696d69dddbb7e9ae336d727c308b493755aa741ecb295217ba0fee8fb07a70493e7b437daed62b5cf30718f30931cbce718a55e63e12800
SSDEEP 24576:at/cEhMxQr61gT7tEuJu1pILcyD7I1mFOtyChUok6ywq2Z02Hg8yjrQ:aN9MYPT7tRIpCcP1IPoO2qk
TLSH
T1B6251211BBD6C237D95202B64881875B9E39B4022F7652CBFBC02F5ECF242D29E3A351
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

109592

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

d:\src\Steam2\Projects\GazelleProto\Tools\WriteMiniDump\vc80_release_static\WriteMiniDump.pdb

kernel32

GetModuleHandleA InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection DebugBreak FormatMessageA FindNextFileA InterlockedDecrement FindClose CreateDirectoryA FindFirstFileA GetLongPathNameA SetFileAttributesA Sleep DeleteFileA RemoveDirectoryA GetFileAttributesA GetCurrentProcess GetProcAddress LoadLibraryA GetSystemInfo GetVersionExA GetConsoleWindow OpenProcess WaitForSingleObject GetCurrentThreadId GetCurrentProcessId GetTempPathA RaiseException WriteConsoleW GetConsoleOutputCP WriteConsoleA SetStdHandle GetTimeZoneInformation CompareStringW CompareStringA GetFullPathNameA GetCommandLineA CreateProcessA CreateFileA GetFileInformationByHandle CreateFileMappingA MapViewOfFile GetACP WideCharToMultiByte GetLastError CloseHandle GetModuleFileNameA UnmapViewOfFile GetCurrentDirectoryA SetCurrentDirectoryA GetLocaleInfoW SetFilePointer FlushFileBuffers IsValidLocale EnumSystemLocalesA GetUserDefaultLCID InterlockedIncrement InterlockedExchange MultiByteToWideChar HeapFree TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlUnwind ExitProcess FileTimeToSystemTime FileTimeToLocalFileTime GetDriveTypeA HeapAlloc GetSystemTimeAsFileTime GetProcessHeap LCMapStringA LCMapStringW GetCPInfo GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError HeapDestroy HeapCreate VirtualFree VirtualAlloc HeapReAlloc WriteFile GetStdHandle HeapSize ReadFile GetConsoleCP GetConsoleMode SetEnvironmentVariableA SetEnvironmentVariableW FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetTickCount GetLocaleInfoA GetStringTypeA GetStringTypeW

user32

MessageBoxA wsprintfA

shell32

SHGetFileInfoA

version

GetFileVersionInfoA GetFileVersionInfoSizeA VerQueryValueA

Sharing

General

Malware Config

Signatures

File Explorer

2026-10-21_a20c138c376b37a41afed06970aa7ccf_elex_smoke-loader_stop

kernel32

user32

shell32

version

generic