2026-11-02_bfdd53c81b5e7cad26a6cda9b67e286e_amadey_elex_maze_smoke-loader

Sharing

Copy URL Twitter E-mail

General

Target
2026-11-02_bfdd53c81b5e7cad26a6cda9b67e286e_amadey_elex_maze_smoke-loader
Size 6.5MB
Sample261102-3ty2zaxwev
SHA256 afb046d466194c3c9fabce1a0a191a817acb9b711db85665165ed0fed917ac9a
MD5 bfdd53c81b5e7cad26a6cda9b67e286e
SHA1 cf7e6df51c8b6db805c6ea7db800bd1ab4f86736
SHA512 9387af1aebecf7869c5ed3f479b889c67dc5bc1cb1acbdbd7c46c1369b2ecb7844769074d6d858ca6c7f980e2f4f6010baec3b06dd564f1b20a7f665033dd12a
SSDEEP 196608:xGrOaK9woY8qyq5AKi1wOuPid8JNuxgz8:YK9mU0+juqd8J
TLSH
T111660212BB40D162E54B0074791EE3D9A168BA304669CC83B6C5BB1F79B0FD2E936F47
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-11-02_bfdd53c81b5e7cad26a6cda9b67e286e_amadey_elex_maze_smoke-loader

File Explorer

2026-11-02_bfdd53c81b5e7cad26a6cda9b67e286e_amadey_elex_maze_smoke-loader

.exe 6.5MB

2026-11-02_bfdd53c81b5e7cad26a6cda9b67e286e_amadey_elex_maze_smoke-loader

IMPHASH 9c9edfc6e777c221e86b817dfc3d1c3f
SHA256 afb046d466194c3c9fabce1a0a191a817acb9b711db85665165ed0fed917ac9a
MD5 bfdd53c81b5e7cad26a6cda9b67e286e
SHA1 cf7e6df51c8b6db805c6ea7db800bd1ab4f86736
SHA512 9387af1aebecf7869c5ed3f479b889c67dc5bc1cb1acbdbd7c46c1369b2ecb7844769074d6d858ca6c7f980e2f4f6010baec3b06dd564f1b20a7f665033dd12a
SSDEEP 196608:xGrOaK9woY8qyq5AKi1wOuPid8JNuxgz8:YK9mU0+juqd8J
TLSH
T111660212BB40D162E54B0074791EE3D9A168BA304669CC83B6C5BB1F79B0FD2E936F47
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

253472

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LCMapStringW HeapReAlloc GetCPInfo GetOEMCP GetACP IsValidCodePage LoadLibraryExW LeaveCriticalSection EnterCriticalSection GetModuleHandleW TlsFree TlsSetValue TlsGetValue TlsAlloc TerminateProcess GetCurrentProcess Sleep SetUnhandledExceptionFilter UnhandledExceptionFilter FreeEnvironmentStringsW GetEnvironmentStringsW GetSystemTimeAsFileTime GetCurrentProcessId QueryPerformanceCounter WriteFile GetModuleFileNameW GetStartupInfoW DeleteCriticalSection GetFileType GetStdHandle GetProcessHeap GetCurrentThreadId SetLastError HeapAlloc HeapFree HeapSize WideCharToMultiByte MultiByteToWideChar GetProcAddress GetModuleHandleExW ExitProcess OutputDebugStringW GetStringTypeW FlushFileBuffers GetConsoleCP GetConsoleMode SetStdHandle SetFilePointerEx WriteConsoleW CloseHandle SwitchToThread lstrcpyW GetTempFileNameW ResumeThread DeleteFileW GetWindowsDirectoryW IsDebuggerPresent GetThreadPriority EnumResourceTypesW DeviceIoControl QueryDosDeviceW LockResource VirtualAlloc GetLastError GetCPInfoExW SetThreadLocale VerifyVersionInfoW lstrcpynW GetExitCodeProcess HeapCreate GetVersionExW LoadLibraryW GetUserDefaultLangID GetPrivateProfileStringW SignalObjectAndWait VerSetConditionMask EnumCalendarInfoW LoadResource SetErrorMode RtlCaptureContext SetFilePointer EnumResourceNamesW InitializeCriticalSectionAndSpinCount IsProcessorFeaturePresent RtlUnwind RaiseException GetCommandLineW DecodePointer EncodePointer CreateFileW

user32

EndPaint DestroyWindow GetDlgItemInt GetSystemMenu SetTimer MapDialogRect PostQuitMessage SendDlgItemMessageA TrackPopupMenu RegisterWindowMessageW SetCapture KillTimer MsgWaitForMultipleObjects GetKeyState GetSubMenu CharLowerBuffW CreateMenu SetFocus ModifyMenuW GetDoubleClickTime GetDC GetCapture ShowCursor GetKeyboardState SetDlgItemInt GetMenu OffsetRect IsZoomed SetWindowLongA LoadMenuW UnregisterClassA GetWindowTextW PeekMessageA MonitorFromWindow SetClassLongA GetDlgItem ScrollWindow EndDialog DefWindowProcA RedrawWindow SendDlgItemMessageW GetDesktopWindow GetSysColor SetMenu CreatePopupMenu GetSysColorBrush IsWindow PostMessageA RegisterClassW GetSystemMetrics SetWindowTextA GetDlgItemTextW SetDlgItemTextW SendMessageW EnableWindow LoadCursorA GetDlgItemTextA DialogBoxParamA GetCaretBlinkTime SetWindowTextW ValidateRect GetMonitorInfoW CheckMenuItem RegisterClassA SetRect

gdi32

GetBitmapBits ExtCreatePen MoveToEx EndPage BitBlt SetTextColor MaskBlt CreateFontIndirectW CreateFontIndirectA GetDIBits SetDIBColorTable ExcludeClipRect GdiFlush SetPixel DeleteObject SelectClipRgn CreateCompatibleDC CreateRectRgnIndirect CreateBrushIndirect SetPaletteEntries CreateRectRgn GetCharWidth32A GetCharABCWidthsFloatA GetSystemPaletteEntries GetClipBox RectVisible RoundRect SetTextAlign CreateDIBitmap GetPixel RestoreDC CreateSolidBrush CreateCompatibleBitmap

comdlg32

GetSaveFileNameW

advapi32

RegSetValueExW RegLoadKeyW ControlService RegConnectRegistryW QueryServiceStatus RegGetKeySecurity OpenSCManagerW CloseServiceHandle

shell32

ShellExecuteW

oleaut32

SafeArrayGetUBound SafeArrayPtrOfIndex VariantCopy VariantClear SafeArrayGetLBound SysFreeString

Sharing

General

Malware Config

Signatures

File Explorer

2026-11-02_bfdd53c81b5e7cad26a6cda9b67e286e_amadey_elex_maze_smoke-loader

kernel32

user32

gdi32

comdlg32

advapi32

shell32

oleaut32

generic