2026-10-30_88cf5ec360e8870ef089daf8499de56f_amadey_elex_smoke-loader

General

Target
2026-10-30_88cf5ec360e8870ef089daf8499de56f_amadey_elex_smoke-loader
Size 11.6MB
Sample261031-3by91s1tex
SHA256 8849eae960ea92a1fb22318ce633b2457ca81ef2d8689e8b43d46ac8bf2477b0
MD5 88cf5ec360e8870ef089daf8499de56f
SHA1 12c57bf7157f302fd8b9501067c202959da316ce
SHA512 407d7af234ce589c580d749636c7d88c5ea7727501d13e91397b74ace26414480eaf86c7f72e474ac37d48b2df06725d9a7f0deaf7d25e1af45c25b35a3eab59
SSDEEP 24576:kminVhqEJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJf:2n
TLSH
T16AC67C61D772C837D4B982FC621E7B69C5CD82B7A64229DB19443EE40633BA35CF8217
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-10-30_88cf5ec360e8870ef089daf8499de56f_amadey_elex_smoke-loader

File Explorer

2026-10-30_88cf5ec360e8870ef089daf8499de56f_amadey_elex_smoke-loader

.exe 11.6MB

2026-10-30_88cf5ec360e8870ef089daf8499de56f_amadey_elex_smoke-loader

IMPHASH b521fc70c513454aa06843505654d3aa
SHA256 8849eae960ea92a1fb22318ce633b2457ca81ef2d8689e8b43d46ac8bf2477b0
MD5 88cf5ec360e8870ef089daf8499de56f
SHA1 12c57bf7157f302fd8b9501067c202959da316ce
SHA512 407d7af234ce589c580d749636c7d88c5ea7727501d13e91397b74ace26414480eaf86c7f72e474ac37d48b2df06725d9a7f0deaf7d25e1af45c25b35a3eab59
SSDEEP 24576:kminVhqEJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJf:2n
TLSH
T16AC67C61D772C837D4B982FC621E7B69C5CD82B7A64229DB19443EE40633BA35CF8217
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

109280

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\feruhujipo diyuvom\68-lixegaluzepedo_cedi pa.pdb

kernel32

SetDllDirectoryW InterlockedIncrement _lwrite ReadConsoleA GetSystemWindowsDirectoryW GetNamedPipeHandleStateA GetComputerNameW FreeEnvironmentStringsA GetTickCount CreateNamedPipeW GetProcessHeap ConvertFiberToThread GetSystemTimeAsFileTime GetPrivateProfileStringW GetWindowsDirectoryA GetSystemWow64DirectoryA QueryActCtxW CreateActCtxW GetSystemTimes TlsSetValue GetConsoleMode GetVersionExW HeapCreate HeapValidate GetVolumePathNamesForVolumeNameW IsDBCSLeadByte GetModuleFileNameW CompareStringW GetStartupInfoW VerifyVersionInfoW FindFirstFileExA GetHandleInformation GetLastError SetWaitableTimer SetLastError SetFirmwareEnvironmentVariableW CopyFileA GetConsoleDisplayMode FindClose LoadLibraryA LocalAlloc IsWow64Process WritePrivateProfileStringA IsSystemResumeAutomatic SetCurrentDirectoryW SetFileApisToANSI QueryDosDeviceW GetModuleFileNameA GetOEMCP GetModuleHandleA GetProcessShutdownParameters CreateWaitableTimerW FreeEnvironmentStringsW WriteProfileStringW RequestWakeupLatency BuildCommDCBA VirtualProtect GetConsoleCursorInfo ReadConsoleInputW TlsAlloc FileTimeToLocalFileTime CloseHandle CreateFileW SetStdHandle lstrlenA CommConfigDialogA GetDriveTypeW GetConsoleAliasesLengthW GetLongPathNameW InterlockedDecrement InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection EncodePointer DecodePointer GetCommandLineW HeapSetInformation IsBadReadPtr RaiseException RtlUnwind IsProcessorFeaturePresent InitializeCriticalSectionAndSpinCount SetUnhandledExceptionFilter QueryPerformanceCounter GetCurrentThreadId GetCurrentProcessId GetProcAddress GetModuleHandleW ExitProcess GetEnvironmentStringsW SetHandleCount GetStdHandle GetFileType TlsGetValue TlsFree WriteFile HeapAlloc HeapReAlloc HeapSize HeapQueryInformation TerminateProcess GetCurrentProcess UnhandledExceptionFilter IsDebuggerPresent HeapFree GetACP GetCPInfo IsValidCodePage GetStringTypeW MultiByteToWideChar OutputDebugStringA WriteConsoleW OutputDebugStringW LoadLibraryW WideCharToMultiByte LCMapStringW SetFilePointer GetConsoleCP FlushFileBuffers

user32

GetCaretBlinkTime GetComboBoxInfo

gdi32

GetBitmapBits

advapi32

AbortSystemShutdownW SetKernelObjectSecurity

Sharing

General

Malware Config

Signatures

File Explorer

2026-10-30_88cf5ec360e8870ef089daf8499de56f_amadey_elex_smoke-loader

kernel32

user32

gdi32

advapi32

generic