2026-05-03_95da4e731bafe2bd6ee75bfcee94969a_elex_stop

General

Target
2026-05-03_95da4e731bafe2bd6ee75bfcee94969a_elex_stop
Size 818KB
Sample260503-ffdgsabx8x
SHA256 a4c380b75cc1ed3b89c627a01533ece5f28d9439e9aa3b7cc72350e6ae4ea037
MD5 95da4e731bafe2bd6ee75bfcee94969a
SHA1 65b106987e15bbbf555c41fe1ec90856a0ac2735
SHA512 1283682a9d1da5bfb5ddb6519e03ad5dc2146af79645983cdf1fd0f2f6df6f07f514e901e3a112ff0d825f373346af87ee961d70af1093ede455dbbf61f1826f
SSDEEP 12288:WX8Djadu8J4YSjX/THmxr1bBGsHrGJ5O8S/WNLKlUmpRe94:w8DGHJLUzmx1NGwG+h/KKlUmpRee
TLSH
T16F05AE1033FC4569E2FB4B79B43444144B77B693A6B2D78F15CC299D09E3B829A21BB3
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-05-03_95da4e731bafe2bd6ee75bfcee94969a_elex_stop

File Explorer

2026-05-03_95da4e731bafe2bd6ee75bfcee94969a_elex_stop

.exe 818KB

2026-05-03_95da4e731bafe2bd6ee75bfcee94969a_elex_stop

IMPHASH a3cd30cc30d79a7a89ca3c454827da96
SHA256 a4c380b75cc1ed3b89c627a01533ece5f28d9439e9aa3b7cc72350e6ae4ea037
MD5 95da4e731bafe2bd6ee75bfcee94969a
SHA1 65b106987e15bbbf555c41fe1ec90856a0ac2735
SHA512 1283682a9d1da5bfb5ddb6519e03ad5dc2146af79645983cdf1fd0f2f6df6f07f514e901e3a112ff0d825f373346af87ee961d70af1093ede455dbbf61f1826f
SSDEEP 12288:WX8Djadu8J4YSjX/THmxr1bBGsHrGJ5O8S/WNLKlUmpRe94:w8DGHJLUzmx1NGwG+h/KKlUmpRee
TLSH
T16F05AE1033FC4569E2FB4B79B43444144B77B693A6B2D78F15CC299D09E3B829A21BB3
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

212719

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

ws2_32

WSACloseEvent gethostname WSAAddressToStringW WSAStartup WSAConnect getsockname setsockopt sendto WSACleanup socket gethostbyname

kernel32

GetModuleHandleA CreateFileA SetStdHandle WriteConsoleW GetConsoleOutputCP WriteConsoleA ReadFile GetLocaleInfoW GetFileSize SetEndOfFile CreateProcessW CreateDirectoryW VirtualFree WriteFile LoadLibraryW Sleep MulDiv CreateFileW GetProcAddress VirtualAlloc GetDiskFreeSpaceW ResetEvent LocalAlloc RemoveDirectoryW VirtualProtect DeleteCriticalSection GetCurrentThreadId CloseHandle DeleteFileW LocalFree WideCharToMultiByte InterlockedIncrement InterlockedDecrement InterlockedExchange MultiByteToWideChar InitializeCriticalSection EnterCriticalSection LeaveCriticalSection TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapFree GetVersionExA HeapAlloc GetProcessHeap GetStartupInfoW GetCPInfo GetLastError RaiseException RtlUnwind LCMapStringA LCMapStringW TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetACP GetOEMCP ExitProcess GetStdHandle GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineA GetCommandLineW SetHandleCount GetFileType GetStartupInfoA HeapDestroy HeapCreate QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetStringTypeA GetStringTypeW HeapReAlloc GetConsoleCP GetConsoleMode FlushFileBuffers SetFilePointer HeapSize GetUserDefaultLCID GetLocaleInfoA EnumSystemLocalesA IsValidLocale IsValidCodePage LoadLibraryA

Sharing

General

Malware Config

Signatures

File Explorer

2026-05-03_95da4e731bafe2bd6ee75bfcee94969a_elex_stop

ws2_32

kernel32

generic