2026-06-01_b7d40987a0d5eccdeddcbecb27f0810d_elex_stop

Sharing

Copy URL Twitter E-mail

General

Target
2026-06-01_b7d40987a0d5eccdeddcbecb27f0810d_elex_stop
Size 11.0MB
Sample260601-b3m8aaa18v
SHA256 0cef7f7b7a312dbcf49bf4765403a926ef8bcfe9ce7249008bf63aebd36795a4
MD5 b7d40987a0d5eccdeddcbecb27f0810d
SHA1 1043e7aa145d04f6ccdc4c3a752f746807d69e2f
SHA512 3aab02338e3eebf9e3f85d2793b01529d79e76605a105b8a1cc41daea0afa90fc39e608569b0f9c6b70ef6735e637e5fc14fa8652baccc37e29baa6734af5dfb
SSDEEP 196608:DisCJriEJP/tE8wpbF3jaPNlqkUBY6FSLuEzBb:DisCJJZ/CpbF3jENlqkUBYBPb
TLSH
T18FC68D21FBDAC0B5EA87B1B946AFB32E5256E7881B2409D3D1143E0BDDA07F15E361C1
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-06-01_b7d40987a0d5eccdeddcbecb27f0810d_elex_stop

File Explorer

2026-06-01_b7d40987a0d5eccdeddcbecb27f0810d_elex_stop

.exe 11.0MB

2026-06-01_b7d40987a0d5eccdeddcbecb27f0810d_elex_stop

IMPHASH d3a0e2ce263915eb6eab704932dcebb1
SHA256 0cef7f7b7a312dbcf49bf4765403a926ef8bcfe9ce7249008bf63aebd36795a4
MD5 b7d40987a0d5eccdeddcbecb27f0810d
SHA1 1043e7aa145d04f6ccdc4c3a752f746807d69e2f
SHA512 3aab02338e3eebf9e3f85d2793b01529d79e76605a105b8a1cc41daea0afa90fc39e608569b0f9c6b70ef6735e637e5fc14fa8652baccc37e29baa6734af5dfb
SSDEEP 196608:DisCJriEJP/tE8wpbF3jaPNlqkUBY6FSLuEzBb:DisCJJZ/CpbF3jENlqkUBYBPb
TLSH
T18FC68D21FBDAC0B5EA87B1B946AFB32E5256E7881B2409D3D1143E0BDDA07F15E361C1
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

7641938

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

D:\vss-od\Silkroad\Client\Out\SRO_Client.pdb

gdi32

CreateFontIndirectA SetTextColor SetBkMode SetPixel GetPixel SetDIBColorTable CreateCompatibleDC RealizePalette SelectPalette SetPaletteEntries GetTextMetricsA CreateDIBSection CreateFontA GetDeviceGammaRamp GetTextExtentPoint32W GetTextExtentPoint32A GetStockObject GetDIBits GetObjectA SetBkColor CreateSolidBrush RemoveFontResourceA AddFontResourceA BitBlt DeleteObject SetDeviceGammaRamp SelectObject CreatePalette GetGlyphOutlineW DeleteDC

advapi32

GetUserNameA OpenProcessToken GetTokenInformation EqualSid RegCloseKey RegSetValueExA RegCreateKeyExA FreeSid RegOpenKeyExA RegOpenKeyA RegQueryValueExA AllocateAndInitializeSid

user32

CloseClipboard GetClipboardData OpenClipboard IsClipboardFormatAvailable CreateWindowExA IsCharAlphaW IsCharAlphaNumericW SetCursorPos ScreenToClient GetCursorPos GetActiveWindow SetRect PostMessageA GetWindowThreadProcessId EndDialog SetWindowPos MessageBoxA GetWindowRect HideCaret GetKeyState SendMessageA GetWindow IsWindow FindWindowA SetFocus CallNextHookEx SetCursor GetWindowTextA wsprintfA DefWindowProcA PostQuitMessage ChangeDisplaySettingsA SystemParametersInfoA EnumDisplaySettingsA ClipCursor GetClassLongA ShowCaret SetMenu DestroyAcceleratorTable LoadMenuA RegisterClassA DestroyMenu GetIconInfo EnableWindow CheckRadioButton SetWindowTextA AppendMenuA CreatePopupMenu CreateMenu CharNextExA CallWindowProcA UnhookWindowsHookEx SetWindowLongA GetWindowLongA SetWindowsHookExA PtInRect AdjustWindowRect GetClientRect GetDesktopWindow RegisterClassExA LoadCursorA DestroyWindow LoadIconA ShowWindow DispatchMessageA TranslateMessage TranslateAcceleratorA GetMessageA PeekMessageA RegisterHotKey LoadAcceleratorsA SetForegroundWindow LoadStringA MoveWindow GetKeyboardLayout GetFocus GetMenu IsDlgButtonChecked GetDC ReleaseDC UpdateWindow MessageBoxW CharNextA CharNextW DialogBoxParamA GetSystemMetrics GetDlgItem SetWindowTextW

imm32

ImmGetCandidateWindow ImmSetConversionStatus ImmGetConversionStatus ImmNotifyIME ImmSetCandidateWindow ImmGetCompositionStringW ImmGetContext ImmReleaseContext ImmGetProperty ImmAssociateContext

kernel32

LCMapStringA GetTimeZoneInformation IsValidCodePage GetOEMCP GetCPInfo HeapSize LCMapStringW HeapCreate HeapDestroy HeapReAlloc VirtualAlloc VirtualFree FatalAppExitA SetHandleCount GetFileType GetConsoleCP GetConsoleMode SetConsoleCtrlHandler FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW GetStdHandle InterlockedExchange Sleep CloseHandle WriteFile CreateFileW ReadFile GetFileSize CreateFileA lstrlenA GetLastError InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection SetFilePointer WideCharToMultiByte InterlockedIncrement InterlockedDecrement ResetEvent CreateEventA DeleteFileA CreateDirectoryA SetCurrentDirectoryA MultiByteToWideChar SetEvent WaitForSingleObject CreateThread OutputDebugStringA GetTickCount GetModuleFileNameA VirtualQuery lstrcmpW GetACP GetVersion GlobalUnlock GlobalLock Beep GetProcAddress GetModuleHandleA CreateMutexA WinExec GetCurrentProcess GetCurrentProcessId GetLocalTime SetUnhandledExceptionFilter CompareStringA FindClose FindFirstFileA FileTimeToSystemTime FileTimeToLocalFileTime GetFileTime GetSystemDirectoryA FindNextFileA SetFileAttributesA GetCommandLineA FreeLibrary LoadLibraryA GetLocaleInfoA GetThreadLocale GetVersionExA lstrcmpA GetSystemInfo IsProcessorFeaturePresent MapViewOfFile CreateFileMappingA UnmapViewOfFile LockResource LoadResource SizeofResource FindResourceA FindResourceW GetFullPathNameA lstrcmpiA HeapAlloc GetProcessHeap HeapFree GetCurrentThread TlsFree TlsSetValue TlsAlloc TlsGetValue IsDebuggerPresent TerminateProcess GetStartupInfoA UnhandledExceptionFilter ExitProcess GetSystemTimeAsFileTime RaiseException RtlUnwind GlobalFree GlobalAlloc GlobalMemoryStatus SetLastError Process32First Process32Next CreateToolhelp32Snapshot Module32First Module32Next CopyFileA GetFileAttributesA GetCurrentDirectoryA QueryPerformanceCounter GetTimeFormatA GetDateFormatA GetUserDefaultLCID EnumSystemLocalesA IsValidLocale GetStringTypeA GetStringTypeW GetLocaleInfoW SetStdHandle FlushFileBuffers WriteConsoleA GetConsoleOutputCP WriteConsoleW SetEndOfFile CompareStringW SetEnvironmentVariableA TerminateThread SetThreadPriority ExitThread lstrcpyA lstrcatA GetExitCodeThread VirtualProtect GetSystemDefaultLangID _lwrite QueryPerformanceFrequency MulDiv lstrcpynA ResumeThread GetWindowsDirectoryA SuspendThread CreateIoCompletionPort PostQueuedCompletionStatus GetQueuedCompletionStatus FlushViewOfFile ReleaseSemaphore SleepEx FlushInstructionCache GetCurrentThreadId

shell32

ShellExecuteW ShellExecuteA SHGetSpecialFolderPathA ExtractIconExA

wininet

InternetCloseHandle InternetGetLastResponseInfoA FtpSetCurrentDirectoryA FtpCreateDirectoryA FtpRemoveDirectoryA FtpDeleteFileA FtpRenameFileA InternetOpenA FtpOpenFileA FtpGetFileA FtpGetCurrentDirectoryA InternetFindNextFileA FtpFindFirstFileA DeleteUrlCacheEntry FtpPutFileA InternetCrackUrlA InternetConnectA InternetWriteFile

urlmon

URLDownloadToFileA

ws2_32

inet_ntoa WSAGetOverlappedResult gethostname WSAResetEvent WSAWaitForMultipleEvents gethostbyaddr ntohs inet_addr WSACleanup closesocket bind htonl htons socket WSACloseEvent WSARecvFrom WSASendTo WSAStartup getsockname select WSAGetLastError connect ioctlsocket send WSACreateEvent recvfrom gethostbyname sendto accept getpeername getsockopt WSASend listen WSASocketA shutdown WSAIoctl WSARecv setsockopt WSASetEvent

version

VerQueryValueA GetFileVersionInfoSizeA GetFileVersionInfoA

ddraw

DirectDrawCreateEx

iphlpapi

GetAdaptersInfo GetTcpTable

winmm

timeGetTime mmioAscend mmioRead mmioDescend mmioGetInfo mmioCreateChunk mmioSeek mmioSetInfo mmioAdvance mmioWrite mmioClose mmioOpenA timeSetEvent timeKillEvent

d3d9

Direct3DCreate9

ole32

CoCreateGuid CoUninitialize CoInitialize

dsound

ord11

Sharing

General

Malware Config

Signatures

File Explorer

2026-06-01_b7d40987a0d5eccdeddcbecb27f0810d_elex_stop

gdi32

advapi32

user32

imm32

kernel32

shell32

wininet

urlmon

ws2_32

version

ddraw

iphlpapi

winmm

d3d9

ole32

dsound

generic