2026-04-16_b366bd4c010a8d8133078fc9d3adf4e3_elex_mafia

Sharing

Copy URL Twitter E-mail

General

Target
2026-04-16_b366bd4c010a8d8133078fc9d3adf4e3_elex_mafia
Size 560KB
Sample260416-c8qq2aev6k
SHA256 abf2a27cceca5fbab950ba013366b73a8f048bca90e075c45123b70bc3d5b138
MD5 b366bd4c010a8d8133078fc9d3adf4e3
SHA1 0e468e7c1138cd01c7c9a9701e95f5034bb347b1
SHA512 cf626085e72a30694e1e1dd1053a0cbb0db9d38a6dc1af0db0ac8d912396652b52d213e7d5fd0978279ff8cc221369a0bfce564fe758db318d21d73a028889cd
SSDEEP 12288:MlFXOQUDmrC8SSJhm27/ERk83mVJIZxV:MlUQbC8S327/ElmDIR
TLSH
T15AC4F0127548C073E69201304A62DBA25B3F7D75972AA4C73BD0366DAFB83D0DA7834B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-04-16_b366bd4c010a8d8133078fc9d3adf4e3_elex_mafia

File Explorer

2026-04-16_b366bd4c010a8d8133078fc9d3adf4e3_elex_mafia

.exe 560KB

2026-04-16_b366bd4c010a8d8133078fc9d3adf4e3_elex_mafia

SHA256 abf2a27cceca5fbab950ba013366b73a8f048bca90e075c45123b70bc3d5b138
MD5 b366bd4c010a8d8133078fc9d3adf4e3
SHA1 0e468e7c1138cd01c7c9a9701e95f5034bb347b1
SHA512 cf626085e72a30694e1e1dd1053a0cbb0db9d38a6dc1af0db0ac8d912396652b52d213e7d5fd0978279ff8cc221369a0bfce564fe758db318d21d73a028889cd
SSDEEP 12288:MlFXOQUDmrC8SSJhm27/ERk83mVJIZxV:MlUQbC8S327/ElmDIR
TLSH
T15AC4F0127548C073E69201304A62DBA25B3F7D75972AA4C73BD0366DAFB83D0DA7834B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

70582

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

Name

.text

Size

136KB

Virtual Size

136KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

24KB

Virtual Size

24KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.text

Size

283KB

Virtual Size

283KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

50KB

Virtual Size

50KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

10KB

Virtual Size

10KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.pdata

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

8KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

8KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.text

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-04-16_b366bd4c010a8d8133078fc9d3adf4e3_elex_mafia

generic