2026-11-01_de6c72331531729194077b8b30d99975_elex_smoke-loader_wapomi

Sharing

Copy URL Twitter E-mail

General

Target
2026-11-01_de6c72331531729194077b8b30d99975_elex_smoke-loader_wapomi
Size 33KB
Sample261102-g1cawsft8y
SHA256 a2f4ea4467faf4448e9eb2e9e0f3918799398ceff132836f3f59ce25eba7a5ba
MD5 de6c72331531729194077b8b30d99975
SHA1 4778c7321a95f75b8075df7955bbaca1b8d73740
SHA512 cf02dfd2c60dd19a6ba9b62e6ec735360892a39b5bf3c918a7c50759a15f7fd1eec839bd9ca12a85c873cbff1dbf556826fce70e69cb66622f4a1b8c6627304f
SSDEEP 768:4Ox9N5F3wMCG972nISZLLQGPL4vzZq2o9W7GsxBbPr:XN5F3WGwnISZLsGCq2iW7z
TLSH
T170F2AE52DFD2DAA3C845257A2163A172E6BB15347F2942EBE7608C781C1A5C0FC1E14F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-11-01_de6c72331531729194077b8b30d99975_elex_smoke-loader_wapomi

File Explorer

2026-11-01_de6c72331531729194077b8b30d99975_elex_smoke-loader_wapomi

.exe 33KB

2026-11-01_de6c72331531729194077b8b30d99975_elex_smoke-loader_wapomi

IMPHASH 932e47c1f5df68e5a4f02107ce0ce056
SHA256 a2f4ea4467faf4448e9eb2e9e0f3918799398ceff132836f3f59ce25eba7a5ba
MD5 de6c72331531729194077b8b30d99975
SHA1 4778c7321a95f75b8075df7955bbaca1b8d73740
SHA512 cf02dfd2c60dd19a6ba9b62e6ec735360892a39b5bf3c918a7c50759a15f7fd1eec839bd9ca12a85c873cbff1dbf556826fce70e69cb66622f4a1b8c6627304f
SSDEEP 768:4Ox9N5F3wMCG972nISZLLQGPL4vzZq2o9W7GsxBbPr:XN5F3WGwnISZLsGCq2iW7z
TLSH
T170F2AE52DFD2DAA3C845257A2163A172E6BB15347F2942EBE7608C781C1A5C0FC1E14F
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

36864

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

D:\a\1\s\Win32\Release\iproxy.pdb

ws2_32

WSAAddressToStringA send socket connect WSAStartup getsockopt htonl htons ioctlsocket listen select accept bind recv setsockopt closesocket WSAGetLastError

kernel32

GetModuleHandleW SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent CreateThread CloseHandle WaitForSingleObject ExitProcess UnhandledExceptionFilter

getopt

optarg_a optind getopt_long_a

usbmuxd

usbmuxd_connect usbmuxd_get_device_list usbmuxd_get_device libusbmuxd_set_debug_level

vcruntime140

__current_exception_context _except_handler4_common strrchr __current_exception memset

api-ms-win-crt-stdio-l1-1-0

__p__commode _set_fmode __stdio_common_vfprintf __acrt_iob_func

api-ms-win-crt-runtime-l1-1-0

_get_initial_narrow_environment _initterm _initterm_e exit _exit _initialize_narrow_environment _seh_filter_exe __p___argv _cexit _c_exit _register_thread_local_exe_atexit_callback _configure_narrow_argv perror _set_app_type _initialize_onexit_table _register_onexit_function _crt_atexit _controlfp_s terminate strerror __p___argc _errno

api-ms-win-crt-heap-l1-1-0

_set_new_mode malloc free

api-ms-win-crt-convert-l1-1-0

atoi

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-string-l1-1-0

_strdup

Name

.text

Size

8KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

5KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

944B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

512B

Virtual Size

480B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

1024B

Virtual Size

864B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

�G��un

Size

16KB

Virtual Size

20KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

File Explorer

2026-11-01_de6c72331531729194077b8b30d99975_elex_smoke-loader_wapomi

ws2_32

kernel32

getopt

usbmuxd

vcruntime140

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-string-l1-1-0

generic