2026-11-07_017f80efd58db95d821da88317a8de00_amadey_elex_smoke-loader

General

Target
2026-11-07_017f80efd58db95d821da88317a8de00_amadey_elex_smoke-loader
Size 297KB
Sample261109-rhmc9a1tes
SHA256 7d3e4452cfc29f9f497ed1cadf9ad4ccf73e494c11d8b6649a8e3e5658738c52
MD5 017f80efd58db95d821da88317a8de00
SHA1 ef2c92502dbfdc5020586bac180ab58c1780b512
SHA512 59e06c18ea66acf5980c7d7e57c33cf5fca7626dd3e4b7036646581585813e88282078c8fb655d441439f377fc7f64d77720cb486ac2ba1cbf23920ca1d6839e
SSDEEP 6144:kERM/vHNsHN4dPYzbzsYjUZeBdc2Po/K:kERkfNq4dPYfzs1kBd
TLSH
T17E549D04BBA0D434F5B716F949B9A3ADA93F79B1AB2490CB12D216EE17346D0DD3031B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-11-07_017f80efd58db95d821da88317a8de00_amadey_elex_smoke-loader

File Explorer

2026-11-07_017f80efd58db95d821da88317a8de00_amadey_elex_smoke-loader

.exe 297KB

2026-11-07_017f80efd58db95d821da88317a8de00_amadey_elex_smoke-loader

IMPHASH 722252831a6fc255294abdd3e1a4fd3e
SHA256 7d3e4452cfc29f9f497ed1cadf9ad4ccf73e494c11d8b6649a8e3e5658738c52
MD5 017f80efd58db95d821da88317a8de00
SHA1 ef2c92502dbfdc5020586bac180ab58c1780b512
SHA512 59e06c18ea66acf5980c7d7e57c33cf5fca7626dd3e4b7036646581585813e88282078c8fb655d441439f377fc7f64d77720cb486ac2ba1cbf23920ca1d6839e
SSDEEP 6144:kERM/vHNsHN4dPYzbzsYjUZeBdc2Po/K:kERkfNq4dPYfzs1kBd
TLSH
T17E549D04BBA0D434F5B716F949B9A3ADA93F79B1AB2490CB12D216EE17346D0DD3031B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

103696

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\mulohi jewa.pdb

kernel32

OpenFileMappingA GetNumaProcessorNode FindFirstVolumeW ExitProcess GetExitCodeProcess ProcessIdToSessionId GetVersionExW VerifyVersionInfoA GetPrivateProfileStringW GetConsoleCP TlsGetValue GetConsoleMode CopyFileExW VerLanguageNameW FindFirstChangeNotificationA FreeEnvironmentStringsW RequestWakeupLatency SetVolumeMountPointW SetCurrentDirectoryW GetLongPathNameW SetConsoleCursorInfo GlobalHandle SystemTimeToTzSpecificLocalTime SetProcessShutdownParameters CompareStringW LocalLock GetNamedPipeHandleStateW BuildCommDCBAndTimeoutsW GetProcAddress GetModuleHandleA LocalAlloc Sleep MoveFileExA GetCommandLineW InterlockedDecrement InterlockedExchange DeleteFileW GetVolumePathNamesForVolumeNameA GetPrivateProfileIntW HeapValidate GetProcessHeaps CreateNamedPipeW GetCPInfoExA GetSystemWindowsDirectoryA GetSystemWow64DirectoryA GetPrivateProfileStringA GetCalendarInfoA GetLastError GetStringTypeA FatalAppExitA GetThreadSelectorEntry WaitForDebugEvent ReadFileScatter GetTempPathW GetDefaultCommConfigW UnmapViewOfFile GlobalWire WritePrivateProfileSectionW TerminateThread lstrcatW VirtualLock CreateActCtxW InterlockedPopEntrySList OutputDebugStringW SetConsoleTitleA DefineDosDeviceW LoadLibraryA WritePrivateProfileStringW WaitNamedPipeW InterlockedIncrement TerminateProcess SetConsoleMode PeekConsoleInputW ReadConsoleOutputW GetNumberFormatW DuplicateHandle GetPrivateProfileSectionNamesA EnumTimeFormatsA SetLocalTime FindNextFileA FindFirstFileW CreateSemaphoreA OutputDebugStringA lstrcpyA HeapSetInformation CreateHardLinkA SetThreadExecutionState GetSystemTime LockFile EnumCalendarInfoExA GetVolumePathNamesForVolumeNameW SetConsoleScreenBufferSize SearchPathA GetOverlappedResult IsBadStringPtrA GetAtomNameW GetConsoleAliasExesLengthA WriteConsoleInputA LocalUnlock SetCommConfig _lopen EnumSystemLocalesA GetCommState SetEndOfFile GetWriteWatch UnhandledExceptionFilter OpenSemaphoreA GetConsoleScreenBufferInfo ZombifyActCtx EnumDateFormatsW GetSystemTimeAdjustment GetComputerNameA HeapCompact CommConfigDialogW GetModuleFileNameA OpenMutexA GetBinaryTypeW AllocateUserPhysicalPages FindResourceA AreFileApisANSI DeleteTimerQueueTimer EnumResourceNamesA CreateTimerQueueTimer GetProcessTimes UnregisterWait IsBadWritePtr GetCurrentProcessId FatalAppExitW GetFileAttributesA lstrcpynW SetNamedPipeHandleState WriteConsoleOutputAttribute GetCompressedFileSizeA GetFullPathNameW WriteProfileStringW AddVectoredExceptionHandler GlobalAddAtomA EnumDateFormatsExW TerminateJobObject QueryDosDeviceA LeaveCriticalSection SetCurrentDirectoryA SetFileShortNameA GetBinaryTypeA ReadFileEx lstrlenW EncodePointer DecodePointer MoveFileA DeleteFileA GetStartupInfoW IsBadReadPtr GetModuleHandleW IsProcessorFeaturePresent SetUnhandledExceptionFilter QueryPerformanceCounter GetTickCount GetCurrentThreadId GetSystemTimeAsFileTime GetModuleFileNameW GetEnvironmentStringsW SetHandleCount GetStdHandle InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection TlsAlloc TlsSetValue TlsFree SetLastError HeapCreate WriteFile EnterCriticalSection HeapAlloc HeapReAlloc HeapSize HeapQueryInformation GetCurrentProcess IsDebuggerPresent HeapFree GetACP GetOEMCP GetCPInfo IsValidCodePage LoadLibraryW RtlUnwind WriteConsoleW WideCharToMultiByte LCMapStringW MultiByteToWideChar GetStringTypeW SetFilePointer RaiseException SetStdHandle CreateFileW CloseHandle FlushFileBuffers

Sharing

General

Malware Config

Signatures

File Explorer

2026-11-07_017f80efd58db95d821da88317a8de00_amadey_elex_smoke-loader

kernel32

generic