2026-11-04_77f7ae6cce30c21626e9103459fd698f_amadey_elex_smoke-loader

Sharing

Copy URL Twitter E-mail

General

Target
2026-11-04_77f7ae6cce30c21626e9103459fd698f_amadey_elex_smoke-loader
Size 11.7MB
Sample261105-3xvtqagv3p
SHA256 409c792350e05351df2adffad66b027ea64121be3fe02832e07d67891f97f94d
MD5 77f7ae6cce30c21626e9103459fd698f
SHA1 95e19ac7078b5a544103bfdf578c3d1c2f5f5cfa
SHA512 729d729e6129059e836698bc53dac712089916c76e565b20d2f6030d50534bd1011f000f19649c017c52a029183444b667c728014dbefe68d5b997ee6a97091f
SSDEEP 6144:1YaOsVAqupkugc4XJcxGrSXuZet0yobAPrWDA+zFb88888888888888888888888:aan+qufqXJUWSXuZet0yobAYA+
TLSH
T1EBC66B208126BD7FC5B84B7C667F7B4947FDE2E25A68993B872288F548761194CF030B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-11-04_77f7ae6cce30c21626e9103459fd698f_amadey_elex_smoke-loader

File Explorer

2026-11-04_77f7ae6cce30c21626e9103459fd698f_amadey_elex_smoke-loader

.exe 11.7MB

2026-11-04_77f7ae6cce30c21626e9103459fd698f_amadey_elex_smoke-loader

IMPHASH 59be791b1997a927679d8bcc1773dad8
SHA256 409c792350e05351df2adffad66b027ea64121be3fe02832e07d67891f97f94d
MD5 77f7ae6cce30c21626e9103459fd698f
SHA1 95e19ac7078b5a544103bfdf578c3d1c2f5f5cfa
SHA512 729d729e6129059e836698bc53dac712089916c76e565b20d2f6030d50534bd1011f000f19649c017c52a029183444b667c728014dbefe68d5b997ee6a97091f
SSDEEP 6144:1YaOsVAqupkugc4XJcxGrSXuZet0yobAPrWDA+zFb88888888888888888888888:aan+qufqXJUWSXuZet0yobAYA+
TLSH
T1EBC66B208126BD7FC5B84B7C667F7B4947FDE2E25A68993B872288F548761194CF030B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

98272

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\podilonihupa29-howumamevotine91\fagijetele_farafah.pdb

kernel32

GetFullPathNameA GetThreadContext GetPrivateProfileSectionNamesW EnumResourceNamesW UnregisterWait GetNumaNodeProcessorMask SetCriticalSectionSpinCount GetCommModemStatus GlobalMemoryStatus SearchPathW SetInformationJobObject lstrcmpA FindFirstFileW SetThreadContext FindFirstChangeNotificationW EnumCalendarInfoA WriteConsoleInputW IsBadStringPtrW lstrlenA GetConsoleAliasesLengthW EnumDateFormatsExW CopyFileExW TlsGetValue SetLocalTime UnmapViewOfFile MoveFileExA GetNumberOfConsoleInputEvents GetConsoleAliasExesLengthA WriteConsoleOutputCharacterA SetErrorMode FindResourceW FreeLibrary DeleteVolumeMountPointA SetUnhandledExceptionFilter LoadLibraryExW SetDllDirectoryW InterlockedIncrement GetQueuedCompletionStatus VerSetConditionMask MoveFileExW InterlockedDecrement WaitNamedPipeA SetMailslotInfo ZombifyActCtx SetConsoleActiveScreenBuffer WritePrivateProfileSectionA SetDefaultCommConfigW SetFirmwareEnvironmentVariableA SetEnvironmentVariableW GetNamedPipeHandleStateA SignalObjectAndWait AddConsoleAliasW SetVolumeMountPointW GetComputerNameW SetEvent SetThreadExecutionState OpenSemaphoreA GetFileAttributesExA _lclose OutputDebugStringW GetTickCount GetCommConfig GetProcessHeap IsBadReadPtr GetConsoleAliasesLengthA GetSystemTimeAsFileTime GetPrivateProfileStringW GetConsoleTitleA ReadConsoleW CreateRemoteThread GetCompressedFileSizeW EnumTimeFormatsA SetCommTimeouts CreateActCtxW InitializeCriticalSection GetProcessTimes TlsSetValue AllocateUserPhysicalPages OpenProcess FindResourceExA GetConsoleCP GlobalAlloc GetPrivateProfileIntA LoadLibraryW GetConsoleMode TerminateThread FatalAppExitW ReadConsoleInputA GetThreadSelectorEntry CopyFileW AssignProcessToJobObject GetPrivateProfileStructW GetCalendarInfoA ReadFileScatter SetSystemTimeAdjustment ReadConsoleOutputW MapUserPhysicalPagesScatter SetConsoleCP InterlockedPopEntrySList LeaveCriticalSection GlobalFlags lstrcpynW GetNamedPipeInfo HeapValidate GetVolumePathNamesForVolumeNameW CreateSemaphoreA SetConsoleCursorPosition GetFileAttributesW HeapQueryInformation GetBinaryTypeA WritePrivateProfileSectionW GetComputerNameA GetAtomNameW FileTimeToSystemTime GetModuleFileNameW lstrcatA GetBinaryTypeW CompareStringW ExitThread GetVolumePathNameA lstrlenW SetConsoleTitleA GlobalUnlock VirtualUnlock GetTempPathW RaiseException GetStringTypeExA CreateJobObjectA GetPrivateProfileIntW VerifyVersionInfoW InterlockedExchange SetCurrentDirectoryA GetStdHandle FindFirstFileA GetLastError ChangeTimerQueueTimer BindIoCompletionCallback GetProcAddress FindVolumeMountPointClose GetLongPathNameA VirtualAlloc HeapSize BackupWrite VerLanguageNameA CreateNamedPipeA EnumDateFormatsExA CreateJobSet LocalLock MoveFileW LockFileEx DefineDosDeviceA GetNumaHighestNodeNumber FindClose GetPrivateProfileStringA LoadLibraryA Process32FirstW OpenMutexA ProcessIdToSessionId GetFileType WritePrivateProfileStringA MoveFileA BuildCommDCBAndTimeoutsW CreateHardLinkW GetExitCodeThread GetNumberFormatW SetFileApisToANSI QueryDosDeviceW SetConsoleWindowInfo SetThreadIdealProcessor HeapWalk GetPrivateProfileStructA GetTapeParameters GetVolumePathNamesForVolumeNameA GetModuleFileNameA GetDefaultCommConfigA FindNextFileA WriteProfileStringA EnumDateFormatsA WaitCommEvent _lread GetModuleHandleA GetProcessShutdownParameters QueueUserWorkItem ContinueDebugEvent IsDebuggerPresent GetProcessAffinityMask FreeEnvironmentStringsW EnumResourceNamesA WriteProfileStringW BuildCommDCBA EnumDateFormatsW GetConsoleCursorInfo FatalAppExitA PeekConsoleInputA DeleteCriticalSection WriteConsoleOutputAttribute OutputDebugStringA GetCPInfoExA DuplicateHandle FindFirstVolumeA GetVersionExA TlsAlloc TerminateJobObject CloseHandle FileTimeToLocalFileTime GetVersion QueryDepthSList DeleteTimerQueueTimer GlobalAddAtomW SetFileValidData FindActCtxSectionStringW ResetWriteWatch UnregisterWaitEx ReadConsoleOutputCharacterW TlsFree GetProfileSectionW EnumSystemLocalesW lstrcpyW CommConfigDialogW DeleteFileA CreateFileW SetStdHandle TerminateProcess ExitProcess GetCommandLineW HeapSetInformation GetStartupInfoW QueryPerformanceCounter GetCurrentThreadId GetCurrentProcessId DecodePointer GetModuleHandleW GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount EncodePointer SetLastError HeapCreate WriteFile GetACP GetOEMCP GetCPInfo IsValidCodePage EnterCriticalSection GetCurrentProcess UnhandledExceptionFilter HeapAlloc HeapReAlloc HeapFree RtlUnwind WideCharToMultiByte LCMapStringW MultiByteToWideChar GetStringTypeW WriteConsoleW IsProcessorFeaturePresent SetFilePointer FlushFileBuffers

user32

GetMessageTime

gdi32

GetBitmapBits

winhttp

WinHttpReadData

msimg32

GradientFill

Sharing

General

Malware Config

Signatures

File Explorer

2026-11-04_77f7ae6cce30c21626e9103459fd698f_amadey_elex_smoke-loader

kernel32

user32

gdi32

winhttp

msimg32

generic