2026-11-01_85a82719fd0b2465ce2d1a716279512e_elex_smoke-loader_wapomi

General

Target
2026-11-01_85a82719fd0b2465ce2d1a716279512e_elex_smoke-loader_wapomi
Size 31KB
Sample261102-thj91adv5m
SHA256 86a6d0dd429084e1bc88400364831accc853935eb12001f0da87d65ad1cf93a6
MD5 85a82719fd0b2465ce2d1a716279512e
SHA1 4fcf9c178dba71ca8d04cdbb7b72bc6ea186aff7
SHA512 13c309d3be2cecece6c478f16330c56d2b12536d53aaa1c0b9b1c258f0f36bff6f0cc2c6b485997596c673ecfcc69f4f30a9ff13ff5692158059b567c4d29ad8
SSDEEP 768:F3FYIm7n/b69EUnzygucPSo7EMLQGPL4vzZq2o9W7GsxBbPr:FMn/bQEUn+gucPSZMsGCq2iW7z
TLSH
T15DE2AF43CF8058B3CADB26B134717A97DBB752315B64B8F7BB5040AA0CA5D81EC2E15E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-11-01_85a82719fd0b2465ce2d1a716279512e_elex_smoke-loader_wapomi

File Explorer

2026-11-01_85a82719fd0b2465ce2d1a716279512e_elex_smoke-loader_wapomi

.exe 31KB

2026-11-01_85a82719fd0b2465ce2d1a716279512e_elex_smoke-loader_wapomi

IMPHASH 94bde3caee211f434d339d5b4578d9ef
SHA256 86a6d0dd429084e1bc88400364831accc853935eb12001f0da87d65ad1cf93a6
MD5 85a82719fd0b2465ce2d1a716279512e
SHA1 4fcf9c178dba71ca8d04cdbb7b72bc6ea186aff7
SHA512 13c309d3be2cecece6c478f16330c56d2b12536d53aaa1c0b9b1c258f0f36bff6f0cc2c6b485997596c673ecfcc69f4f30a9ff13ff5692158059b567c4d29ad8
SSDEEP 768:F3FYIm7n/b69EUnzygucPSo7EMLQGPL4vzZq2o9W7GsxBbPr:FMn/bQEUn+gucPSZMsGCq2iW7z
TLSH
T15DE2AF43CF8058B3CADB26B134717A97DBB752315B64B8F7BB5040AA0CA5D81EC2E15E
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

32768

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

D:\a\1\s\Win32\Release\idevicedate.pdb

kernel32

UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess GetModuleHandleW IsDebuggerPresent InitializeSListHead GetSystemTimeAsFileTime GetCurrentThreadId GetCurrentProcessId QueryPerformanceCounter IsProcessorFeaturePresent

imobiledevice

lockdownd_set_value lockdownd_client_free lockdownd_get_value idevice_new_with_options idevice_set_debug_level idevice_free lockdownd_client_new_with_handshake

plist

plist_free plist_new_real plist_new_uint plist_get_node_type plist_get_uint_val plist_get_real_val

vcruntime140

__current_exception __current_exception_context memset _except_handler4_common strrchr

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vfprintf __acrt_iob_func puts _set_fmode __p__commode

api-ms-win-crt-heap-l1-1-0

_set_new_mode

api-ms-win-crt-time-l1-1-0

_mktime64 _localtime64 strftime _time64

api-ms-win-crt-runtime-l1-1-0

_register_thread_local_exe_atexit_callback _c_exit _cexit __p___argv __p___argc terminate _exit exit _initterm_e _initterm _get_initial_narrow_environment _initialize_narrow_environment _configure_narrow_argv _set_app_type _seh_filter_exe _crt_atexit _controlfp_s _register_onexit_function _initialize_onexit_table

api-ms-win-crt-convert-l1-1-0

atoi

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

Name

.text

Size

6KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

5KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

920B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

512B

Virtual Size

480B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

1024B

Virtual Size

552B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

�|��ul

Size

16KB

Virtual Size

20KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

File Explorer

2026-11-01_85a82719fd0b2465ce2d1a716279512e_elex_smoke-loader_wapomi

kernel32

imobiledevice

plist

vcruntime140

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-time-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-locale-l1-1-0

generic