2026-11-02_d5981d3807739f2b248587d258fde89b_amadey_elex_smoke-loader

Sharing

Copy URL Twitter E-mail

General

Target
2026-11-02_d5981d3807739f2b248587d258fde89b_amadey_elex_smoke-loader
Size 11.3MB
Sample261102-1eezfadt6w
SHA256 3ae03f0d93e29a77c0530de59e85d9b804d31f3380830c375b1198259ceb76d0
MD5 d5981d3807739f2b248587d258fde89b
SHA1 c4a0577b2925edcf48f85c382cc488d67479afb9
SHA512 4472963d9a2b26857ad48042fdb651240b0cea31843328eeb1b9c65950de7ca9a33be5bc18eeb2c6d5c8603e8a45ef001a5d433adcaf9904bf4e3424170834f2
SSDEEP 49152:biWkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkk8:u
TLSH
T177C67C35B36588FAC0BD53BD3A2CFF5169ADFA71E34497BE80940CC88913562C9B542B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-11-02_d5981d3807739f2b248587d258fde89b_amadey_elex_smoke-loader

File Explorer

2026-11-02_d5981d3807739f2b248587d258fde89b_amadey_elex_smoke-loader

.exe 11.3MB

2026-11-02_d5981d3807739f2b248587d258fde89b_amadey_elex_smoke-loader

IMPHASH 227bb68f00c01d84de5b7cf57cce44af
SHA256 3ae03f0d93e29a77c0530de59e85d9b804d31f3380830c375b1198259ceb76d0
MD5 d5981d3807739f2b248587d258fde89b
SHA1 c4a0577b2925edcf48f85c382cc488d67479afb9
SHA512 4472963d9a2b26857ad48042fdb651240b0cea31843328eeb1b9c65950de7ca9a33be5bc18eeb2c6d5c8603e8a45ef001a5d433adcaf9904bf4e3424170834f2
SSDEEP 49152:biWkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkk8:u
TLSH
T177C67C35B36588FAC0BD53BD3A2CFF5169ADFA71E34497BE80940CC88913562C9B542B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

97808

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\bayobabuvire_71\zuridozeyixame\hoyofiya-nujel\84\wecikuwigi.pdb

kernel32

GetNumaNodeProcessorMask SetCriticalSectionSpinCount SearchPathW SetInformationJobObject lstrcmpA FindFirstFileW SetThreadContext EnumCalendarInfoA WriteConsoleInputW IsBadStringPtrW lstrlenA EnumDateFormatsExW CopyFileExW GetNumaProcessorNode TlsGetValue SetLocalTime UnmapViewOfFile MoveFileExA CommConfigDialogA GetNumberOfConsoleInputEvents GetConsoleAliasExesLengthA SetErrorMode FindResourceW BuildCommDCBAndTimeoutsA FreeLibrary SetUnhandledExceptionFilter LoadLibraryExW SetDllDirectoryW GlobalAddAtomA InterlockedIncrement GetQueuedCompletionStatus VerSetConditionMask MoveFileExW ReadConsoleA InterlockedDecrement WaitNamedPipeA SetMailslotInfo SetConsoleActiveScreenBuffer WritePrivateProfileSectionA SetDefaultCommConfigW SetFirmwareEnvironmentVariableA GetSystemWindowsDirectoryW CreateJobObjectW AddConsoleAliasW GetComputerNameW SetEvent SetThreadExecutionState OpenSemaphoreA CreateHardLinkA GetFileAttributesExA _lclose GetModuleHandleW GetTickCount GetCommConfig GetProcessHeap IsBadReadPtr GetConsoleAliasesLengthA GetSystemTimeAsFileTime GetPrivateProfileStringW GetConsoleTitleA CreateRemoteThread GetCompressedFileSizeW EnumTimeFormatsA GetSystemWow64DirectoryA SetCommTimeouts CreateActCtxW WaitForMultipleObjectsEx InitializeCriticalSection GetProcessTimes TlsSetValue AllocateUserPhysicalPages OpenProcess FindResourceExA GlobalAlloc GetPrivateProfileIntA GetConsoleMode FatalAppExitW GetThreadSelectorEntry GetCalendarInfoA ReadFileScatter SetSystemTimeAdjustment SetVolumeMountPointA ReadConsoleOutputW SetConsoleCP DeleteVolumeMountPointW InterlockedPopEntrySList LeaveCriticalSection GetFileAttributesA GlobalFlags lstrcpynW GetNamedPipeInfo HeapValidate GetVolumePathNamesForVolumeNameW CreateSemaphoreA SetConsoleCursorPosition VerifyVersionInfoA HeapQueryInformation TerminateProcess GetAtomNameW FileTimeToSystemTime IsDBCSLeadByte GetModuleFileNameW UnregisterWait GetBinaryTypeW CompareStringW ExitThread GetVolumePathNameA lstrlenW SetConsoleTitleA WritePrivateProfileStringW GlobalUnlock VirtualUnlock GetTempPathW GetStringTypeExA GetNamedPipeHandleStateW GetLargestConsoleWindowSize GetPrivateProfileIntW InterlockedExchange ReleaseActCtx SetCurrentDirectoryA GetStdHandle FindFirstFileA GetLastError ChangeTimerQueueTimer BackupRead BindIoCompletionCallback GetProcAddress FindVolumeMountPointClose GetLongPathNameA VirtualAlloc HeapSize CreateNamedPipeA CreateJobSet LocalLock LockFileEx VerLanguageNameW BuildCommDCBW DefineDosDeviceA FindClose GetPrivateProfileStringA LoadLibraryA Process32FirstW OpenMutexA ProcessIdToSessionId MoveFileA GetExitCodeThread GetNumberFormatW SetFileApisToANSI QueryDosDeviceW SetConsoleWindowInfo SetThreadIdealProcessor HeapWalk GetPrivateProfileStructA GetTapeParameters SetEnvironmentVariableA GetVolumePathNamesForVolumeNameA GetModuleFileNameA GetDefaultCommConfigA FindNextFileA WriteProfileStringA WTSGetActiveConsoleSessionId EnumDateFormatsA WaitCommEvent _lread FindFirstChangeNotificationA GetProcessShutdownParameters QueueUserWorkItem ContinueDebugEvent IsDebuggerPresent GetProcessAffinityMask FatalExit FreeEnvironmentStringsW EnumResourceNamesA WriteProfileStringW EnumDateFormatsW FatalAppExitA PeekConsoleInputA DeleteCriticalSection WriteConsoleOutputAttribute OutputDebugStringA GetCPInfoExA DuplicateHandle FindFirstVolumeA GetVersionExA ReadConsoleInputW TlsAlloc TerminateJobObject CloseHandle GetVersion DeleteTimerQueueTimer GlobalAddAtomW GetPrivateProfileSectionW SetFileValidData FindActCtxSectionStringW ResetWriteWatch UnregisterWaitEx ReadConsoleOutputCharacterW TlsFree GetProfileSectionW EnumSystemLocalesW lstrcpyW CopyFileExA CreateFileW SetStdHandle GetPrivateProfileSectionNamesW EnumResourceNamesW GetThreadContext lstrcatA GetFullPathNameA RaiseException GetCommandLineW HeapSetInformation GetStartupInfoW QueryPerformanceCounter GetCurrentThreadId GetCurrentProcessId DecodePointer ExitProcess GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType EncodePointer SetLastError HeapCreate WriteFile GetACP GetOEMCP GetCPInfo IsValidCodePage EnterCriticalSection LoadLibraryW GetCurrentProcess UnhandledExceptionFilter HeapAlloc HeapReAlloc HeapFree RtlUnwind WideCharToMultiByte LCMapStringW MultiByteToWideChar GetStringTypeW WriteConsoleW OutputDebugStringW IsProcessorFeaturePresent SetFilePointer GetConsoleCP FlushFileBuffers

user32

GetMessageTime

gdi32

GetBitmapBits

advapi32

InitiateSystemShutdownA GetFileSecurityW

msimg32

AlphaBlend

Sharing

General

Malware Config

Signatures

File Explorer

2026-11-02_d5981d3807739f2b248587d258fde89b_amadey_elex_smoke-loader

kernel32

user32

gdi32

advapi32

msimg32

generic