2026-11-03_640ca708b8aaba077102660a82600b75_amadey_elex_smoke-loader

Sharing

Copy URL Twitter E-mail

General

Target
2026-11-03_640ca708b8aaba077102660a82600b75_amadey_elex_smoke-loader
Size 14.7MB
Sample261104-xc2hwaed87
SHA256 59b3a336262f511544625edd78d8d974c92c2e00840eb2dc099bcc2240e87553
MD5 640ca708b8aaba077102660a82600b75
SHA1 9f0fc7cdf955b8e6f9942d22c7b5d870f86948f3
SHA512 67a9631467a89fe89fccf6885332303d4e9058057ef2ff127d9af3656409b69ced2bb772b476d058edcb33d0e4f2f6a1bf673bbfff81c4a90afa7f2ffa576bf4
SSDEEP 49152:hiWkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkko:g
TLSH
T1A0F67C35B36588FAC0BD53BD372CFF5169ADEA71E344977E80940CC88913562C9B982B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-11-03_640ca708b8aaba077102660a82600b75_amadey_elex_smoke-loader

File Explorer

2026-11-03_640ca708b8aaba077102660a82600b75_amadey_elex_smoke-loader

.exe 14.7MB

2026-11-03_640ca708b8aaba077102660a82600b75_amadey_elex_smoke-loader

IMPHASH 227bb68f00c01d84de5b7cf57cce44af
SHA256 59b3a336262f511544625edd78d8d974c92c2e00840eb2dc099bcc2240e87553
MD5 640ca708b8aaba077102660a82600b75
SHA1 9f0fc7cdf955b8e6f9942d22c7b5d870f86948f3
SHA512 67a9631467a89fe89fccf6885332303d4e9058057ef2ff127d9af3656409b69ced2bb772b476d058edcb33d0e4f2f6a1bf673bbfff81c4a90afa7f2ffa576bf4
SSDEEP 49152:hiWkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkko:g
TLSH
T1A0F67C35B36588FAC0BD53BD372CFF5169ADEA71E344977E80940CC88913562C9B982B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

97808

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\bayobabuvire_71\zuridozeyixame\hoyofiya-nujel\84\wecikuwigi.pdb

kernel32

GetNumaNodeProcessorMask SetCriticalSectionSpinCount SearchPathW SetInformationJobObject lstrcmpA FindFirstFileW SetThreadContext EnumCalendarInfoA WriteConsoleInputW IsBadStringPtrW lstrlenA EnumDateFormatsExW CopyFileExW GetNumaProcessorNode TlsGetValue SetLocalTime UnmapViewOfFile MoveFileExA CommConfigDialogA GetNumberOfConsoleInputEvents GetConsoleAliasExesLengthA SetErrorMode FindResourceW BuildCommDCBAndTimeoutsA FreeLibrary SetUnhandledExceptionFilter LoadLibraryExW SetDllDirectoryW GlobalAddAtomA InterlockedIncrement GetQueuedCompletionStatus VerSetConditionMask MoveFileExW ReadConsoleA InterlockedDecrement WaitNamedPipeA SetMailslotInfo SetConsoleActiveScreenBuffer WritePrivateProfileSectionA SetDefaultCommConfigW SetFirmwareEnvironmentVariableA GetSystemWindowsDirectoryW CreateJobObjectW AddConsoleAliasW GetComputerNameW SetEvent SetThreadExecutionState OpenSemaphoreA CreateHardLinkA GetFileAttributesExA _lclose GetModuleHandleW GetTickCount GetCommConfig GetProcessHeap IsBadReadPtr GetConsoleAliasesLengthA GetSystemTimeAsFileTime GetPrivateProfileStringW GetConsoleTitleA CreateRemoteThread GetCompressedFileSizeW EnumTimeFormatsA GetSystemWow64DirectoryA SetCommTimeouts CreateActCtxW WaitForMultipleObjectsEx InitializeCriticalSection GetProcessTimes TlsSetValue AllocateUserPhysicalPages OpenProcess FindResourceExA GlobalAlloc GetPrivateProfileIntA GetConsoleMode FatalAppExitW GetThreadSelectorEntry GetCalendarInfoA ReadFileScatter SetSystemTimeAdjustment SetVolumeMountPointA ReadConsoleOutputW SetConsoleCP DeleteVolumeMountPointW InterlockedPopEntrySList LeaveCriticalSection GetFileAttributesA GlobalFlags lstrcpynW GetNamedPipeInfo HeapValidate GetVolumePathNamesForVolumeNameW CreateSemaphoreA SetConsoleCursorPosition VerifyVersionInfoA HeapQueryInformation TerminateProcess GetAtomNameW FileTimeToSystemTime IsDBCSLeadByte GetModuleFileNameW UnregisterWait GetBinaryTypeW CompareStringW ExitThread GetVolumePathNameA lstrlenW SetConsoleTitleA WritePrivateProfileStringW GlobalUnlock VirtualUnlock GetTempPathW GetStringTypeExA GetNamedPipeHandleStateW GetLargestConsoleWindowSize GetPrivateProfileIntW InterlockedExchange ReleaseActCtx SetCurrentDirectoryA GetStdHandle FindFirstFileA GetLastError ChangeTimerQueueTimer BackupRead BindIoCompletionCallback GetProcAddress FindVolumeMountPointClose GetLongPathNameA VirtualAlloc HeapSize CreateNamedPipeA CreateJobSet LocalLock LockFileEx VerLanguageNameW BuildCommDCBW DefineDosDeviceA FindClose GetPrivateProfileStringA LoadLibraryA Process32FirstW OpenMutexA ProcessIdToSessionId MoveFileA GetExitCodeThread GetNumberFormatW SetFileApisToANSI QueryDosDeviceW SetConsoleWindowInfo SetThreadIdealProcessor HeapWalk GetPrivateProfileStructA GetTapeParameters SetEnvironmentVariableA GetVolumePathNamesForVolumeNameA GetModuleFileNameA GetDefaultCommConfigA FindNextFileA WriteProfileStringA WTSGetActiveConsoleSessionId EnumDateFormatsA WaitCommEvent _lread FindFirstChangeNotificationA GetProcessShutdownParameters QueueUserWorkItem ContinueDebugEvent IsDebuggerPresent GetProcessAffinityMask FatalExit FreeEnvironmentStringsW EnumResourceNamesA WriteProfileStringW EnumDateFormatsW FatalAppExitA PeekConsoleInputA DeleteCriticalSection WriteConsoleOutputAttribute OutputDebugStringA GetCPInfoExA DuplicateHandle FindFirstVolumeA GetVersionExA ReadConsoleInputW TlsAlloc TerminateJobObject CloseHandle GetVersion DeleteTimerQueueTimer GlobalAddAtomW GetPrivateProfileSectionW SetFileValidData FindActCtxSectionStringW ResetWriteWatch UnregisterWaitEx ReadConsoleOutputCharacterW TlsFree GetProfileSectionW EnumSystemLocalesW lstrcpyW CopyFileExA CreateFileW SetStdHandle GetPrivateProfileSectionNamesW EnumResourceNamesW GetThreadContext lstrcatA GetFullPathNameA RaiseException GetCommandLineW HeapSetInformation GetStartupInfoW QueryPerformanceCounter GetCurrentThreadId GetCurrentProcessId DecodePointer ExitProcess GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType EncodePointer SetLastError HeapCreate WriteFile GetACP GetOEMCP GetCPInfo IsValidCodePage EnterCriticalSection LoadLibraryW GetCurrentProcess UnhandledExceptionFilter HeapAlloc HeapReAlloc HeapFree RtlUnwind WideCharToMultiByte LCMapStringW MultiByteToWideChar GetStringTypeW WriteConsoleW OutputDebugStringW IsProcessorFeaturePresent SetFilePointer GetConsoleCP FlushFileBuffers

user32

GetMessageTime

gdi32

GetBitmapBits

advapi32

InitiateSystemShutdownA GetFileSecurityW

msimg32

AlphaBlend

Sharing

General

Malware Config

Signatures

File Explorer

2026-11-03_640ca708b8aaba077102660a82600b75_amadey_elex_smoke-loader

kernel32

user32

gdi32

advapi32

msimg32

generic