2026-07-04_54c8a022cfcdd89622309c6d001ebf57_elex_floxif_glassworm_hijackloader_poet-rat_remcos_stop

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-04_54c8a022cfcdd89622309c6d001ebf57_elex_floxif_glassworm_hijackloader_poet-rat_remcos_stop
Size 6.7MB
Sample260704-svjcssg19s
SHA256 eff900c61aa756a74c6793b1df595b597b6aac3548931d64866fd64021800be1
MD5 54c8a022cfcdd89622309c6d001ebf57
SHA1 077baecfa15487a6130ed1dacb88f6ff9910cdb4
SHA512 800670be67a7da57077b30d54a0898bf4fc36562d69dd976488ab4a8738bfa1795bec295a84a2ad1e781f7088613685459559f82ce3aa266a32898f0e1ff17b5
SSDEEP 196608:UwyitiWWcg36QVNRa0jcXoKb35a+3C50y21wEX:UItiXcg3/VNRaqMoKDy50ycwEX
TLSH
T10866BF02F781C536D6AE03308C9B63656374ED225AF5C783A3A82E1DFDF5780A936356
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

Malware Config

Signatures

Codesign digest Mismatch 1 IoCs

File was altered after it was signed.

resource
2026-07-04_54c8a022cfcdd89622309c6d001ebf57_elex_floxif_glassworm_hijackloader_poet-rat_remcos_stop

File Explorer

2026-07-04_54c8a022cfcdd89622309c6d001ebf57_elex_floxif_glassworm_hijackloader_poet-rat_remcos_stop

.exe 6.7MB

2026-07-04_54c8a022cfcdd89622309c6d001ebf57_elex_floxif_glassworm_hijackloader_poet-rat_remcos_stop

IMPHASH a09c04c4eaf146d091a1c6a681e9a15f
SHA256 eff900c61aa756a74c6793b1df595b597b6aac3548931d64866fd64021800be1
MD5 54c8a022cfcdd89622309c6d001ebf57
SHA1 077baecfa15487a6130ed1dacb88f6ff9910cdb4
SHA512 800670be67a7da57077b30d54a0898bf4fc36562d69dd976488ab4a8738bfa1795bec295a84a2ad1e781f7088613685459559f82ce3aa266a32898f0e1ff17b5
SSDEEP 196608:UwyitiWWcg36QVNRa0jcXoKb35a+3C50y21wEX:UItiXcg3/VNRaqMoKDy50ycwEX
TLSH
T10866BF02F781C536D6AE03308C9B63656374ED225AF5C783A3A82E1DFDF5780A936356
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Codesign digest Mismatch

File was altered after it was signed.

PE Signature issue

Digest

d6:7a:03:14:6e:d0:de:e0:34:fa:74:bd:40:54:ea:8f:52:3e:e9:3e:ba:20:57:54:76:d8:31:99:ac:f8:8f:ec

Digest Algorithm

sha256

PE Digests Matches

Not matched

Trusted

Signing Certificate

SERIALNUMBER=4489370,CN=NCH Software\, Inc.,O=NCH Software\, Inc.,L=Greenwood Village,ST=Colorado,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553

Chains

Aug 1, 2024

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

PE Signature issue

Digest

6d:f7:ce:79:85:21:04:ba:0a:90:17:0b:06:46:b7:db:73:1e:b7:25

Digest Algorithm

sha1

PE Digests Matches

Not matched

Trusted

Signing Certificate

Chains

Aug 1, 2024

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Serial Number

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Mar 23, 2022 - Mar 22, 2037

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Serial Number

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jul 14, 2023 - Oct 13, 2034

Subject

Serial Number

07:ef:f6:93:7e:47:22:71:e7:22:f7:e0:62:48:a3:f1

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Mar 18, 2022 - Apr 2, 2025

Subject

Serial Number

38:63:de:f8

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Dec 24, 1999 - Jul 24, 2029

Subject

Serial Number

58:da:13:ff:00:00:00:00:51:ce:0d:f7

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jul 22, 2015 - Jun 22, 2029

Subject

CN=Entrust Timestamp Authority - TSA1,O=Entrust\, Inc.,L=Ottawa,ST=Ontario,C=CA

Serial Number

07:d7:13:53:da:25:61:b4:61:e9:90:47:8a:4c:ce:04

Issuer

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jan 19, 2024 - Jun 1, 2029

Minor OS version

Major OS version

Entry point

2564302

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE

PDB paths

c:\sourcecode\drawpad\release\Drawpad.pdb

imm32

ImmGetVirtualKey ImmNotifyIME ImmReleaseContext ImmGetCompositionStringW ImmGetContext ImmSetCandidateWindow

kernel32

CreatePipe GetModuleFileNameW GetCurrentProcessId GetPrivateProfileIntW FileTimeToLocalFileTime CreateThread GetTickCount CreateToolhelp32Snapshot SystemTimeToTzSpecificLocalTime DuplicateHandle ProcessIdToSessionId CreateFileMappingW TerminateProcess RtlCaptureContext GetStartupInfoW RemoveDirectoryW LocalAlloc GetPrivateProfileStringW GetModuleHandleW GetACP QueryPerformanceCounter LoadResource QueryPerformanceFrequency GetModuleFileNameA GetEnvironmentVariableA SetEnvironmentVariableW SetEndOfFile GetSystemTime SetThreadPriority GetOverlappedResult GlobalUnlock GetComputerNameW GetCurrentDirectoryA ConnectNamedPipe SizeofResource SetCurrentDirectoryW GetShortPathNameW GetDiskFreeSpaceExW GetPrivateProfileSectionNamesW GetCommandLineW GetProcessHeap FreeResource LoadLibraryExW GetEnvironmentVariableW GlobalHandle CancelIo SetUnhandledExceptionFilter SetFileAttributesW GlobalSize lstrcpyW PeekNamedPipe MoveFileExW VirtualQuery ResumeThread LocalFree ReadProcessMemory GetDriveTypeW WaitNamedPipeW UnmapViewOfFile SetLastError GetExitCodeProcess FormatMessageW MulDiv CreateProcessW VerSetConditionMask lstrlenA SetEnvironmentVariableA CompareStringW GlobalLock Process32FirstW FileTimeToSystemTime LoadLibraryW HeapAlloc GetTimeZoneInformation GetCurrentProcess SetFilePointer GetCPInfo SuspendThread Process32NextW ReleaseMutex OpenFileMappingW CreateMutexW GlobalMemoryStatusEx MapViewOfFile CreateNamedPipeW GetFileAttributesA HeapFree GetThreadContext LockResource FindResourceW GetFileTime GlobalAlloc ExitProcess GetStdHandle GetLocaleInfoW CreateFileW CreateDirectoryW FindClose GetFileSizeEx DisconnectNamedPipe MultiByteToWideChar CopyFileW GetFileAttributesW InterlockedExchangeAdd DeleteFileW Sleep OpenProcess GetSystemInfo GetCurrentThreadId InitializeCriticalSection InterlockedExchange SetFilePointerEx WaitForSingleObject GetCurrentThread GetProcAddress GetLastError InterlockedIncrement FindNextFileW InterlockedDecrement FreeLibrary EnterCriticalSection SetEvent CloseHandle GetTempPathW ResetEvent FlushFileBuffers WriteFile VerifyVersionInfoW GetVersionExA CreateEventW LeaveCriticalSection WideCharToMultiByte GlobalFree WaitForMultipleObjects CompareStringA CreateFileA WriteConsoleW GetConsoleOutputCP WriteConsoleA SetStdHandle GetConsoleMode GetConsoleCP GetLocaleInfoA GetStringTypeW GetStringTypeA GetFileType SetHandleCount GetEnvironmentStringsW FreeEnvironmentStringsW GetEnvironmentStrings FreeEnvironmentStringsA RaiseException HeapReAlloc VirtualAlloc LoadLibraryA GetThreadPriority ReadFile GetVersionExW DeleteCriticalSection FindFirstFileW GetSystemTimeAsFileTime UnhandledExceptionFilter IsDebuggerPresent RtlUnwind GetCommandLineA GetStartupInfoA VirtualFree HeapCreate HeapDestroy HeapSize LCMapStringW LCMapStringA TlsFree TlsSetValue TlsAlloc TlsGetValue GetModuleHandleA IsValidCodePage GetOEMCP

advapi32

GetSidLengthRequired GetAce RegQueryValueExW CryptDestroyKey InitializeSecurityDescriptor ConvertSidToStringSidW GetUserNameW SetSecurityDescriptorDacl CheckTokenMembership CryptDeriveKey CryptHashData RegOpenKeyExW InitializeAcl CryptCreateHash CryptReleaseContext GetTokenInformation RegCloseKey RegDeleteValueW CryptDestroyHash DuplicateTokenEx AllocateAndInitializeSid CryptSetKeyParam CryptDuplicateKey InitializeSid FreeSid RegSetValueExW RegCreateKeyExW RegOpenKeyW RegEnumKeyExW CryptEncrypt CryptAcquireContextW RegQueryInfoKeyW RegEnumKeyW AddAccessAllowedAce OpenProcessToken SetFileSecurityW CryptImportKey RegSetKeySecurity RegEnumValueW CryptDecrypt CryptGetKeyParam GetSidSubAuthority RegDeleteKeyW

comctl32

ImageList_ReplaceIcon PropertySheetW InitCommonControlsEx _TrackMouseEvent CreatePropertySheetPageW ImageList_BeginDrag ImageList_Create ImageList_DragShowNolock ImageList_GetIcon ImageList_Merge ord17 ImageList_DragEnter ImageList_EndDrag ImageList_GetIconSize ImageList_GetImageCount ImageList_DrawEx ImageList_GetImageInfo ImageList_Destroy ImageList_DragLeave ImageList_AddMasked ImageList_Add ImageList_DragMove

comdlg32

GetOpenFileNameW GetSaveFileNameW CommDlgExtendedError PrintDlgW

gdi32

CreateRectRgnIndirect SelectObject LineTo EndDoc TextOutW SetBkMode CreateFontIndirectW CreatePen EndPage GetObjectW CreateSolidBrush GetCurrentObject GetTextMetricsW DeleteObject CreateBitmap CreateDIBSection GetGlyphIndicesW EnumFontFamiliesExW FillRgn GetOutlineTextMetricsW GetTextMetricsA SetBitmapBits CreateCompatibleDC SetViewportExtEx Polygon GetDIBits GetGlyphOutlineW SetTextColor ExtTextOutW GetTextCharset GetTextAlign GetBkMode CreateBrushIndirect CombineRgn SetBrushOrgEx GetObjectA Polyline GetWindowExtEx CreateDCW CreateFontW GetClipBox CreateRectRgn SetBkColor StretchBlt SetDIBitsToDevice BitBlt GetBitmapBits PolyPolyline SetPixel SetStretchBltMode CreatePatternBrush SetTextAlign GetViewportExtEx SetDIBits SetDCBrushColor CreateCompatibleBitmap GetTextExtentPoint32W SetWindowExtEx GetDeviceCaps MoveToEx StartDocW CreateDIBitmap GetStockObject GetFontData DeleteDC StartPage

ole32

CoAddRefServerProcess CoTaskMemFree CoRegisterClassObject CoResumeClassObjects CoInitialize CoSetProxyBlanket CoCreateFreeThreadedMarshaler CoUninitialize CoCreateInstance CoTaskMemAlloc CreateStreamOnHGlobal CoInitializeSecurity CoRevokeClassObject

oleaut32

SysStringByteLen SysFreeString SafeArrayGetElement VariantInit OleLoadPicture VariantClear SysAllocStringLen SysAllocStringByteLen SysAllocString OleLoadPicturePath SafeArrayGetUBound

shell32

SHBrowseForFolderW SHGetFolderPathW DragQueryFileW ShellExecuteExW ShellExecuteA ord680 CommandLineToArgvW SHEmptyRecycleBinW Shell_NotifyIconW ShellExecuteW DragFinish DragAcceptFiles ord155 SHChangeNotify SHGetMalloc SHParseDisplayName SHGetDesktopFolder SHGetPathFromIDListW SHCreateShellItem

shlwapi

StrCmpLogicalW PathRelativePathToW PathCompactPathExW SHDeleteKeyW SHDeleteEmptyKeyW

user32

IsWindow CreateDialogIndirectParamW GetCapture GetScrollBarInfo GetClientRect VkKeyScanW OpenClipboard AppendMenuW SetWindowTextW ScrollWindowEx CreatePopupMenu GetWindowLongW SetForegroundWindow TrackPopupMenu FrameRect SetMenu SetScrollInfo KillTimer GetFocus DrawTextW SetWindowLongW SetClassLongW SetCapture CharLowerW SetPropW MoveWindow GetDC BeginPaint GetScrollInfo GetKeyState SendMessageW ReleaseCapture DestroyMenu ShowWindow GetDesktopWindow RedrawWindow GetForegroundWindow CloseClipboard EndPaint DeleteMenu GetPropW SetWindowsHookExW RemoveMenu LoadImageW EnumDisplaySettingsW RemovePropW MapVirtualKeyW ClientToScreen DispatchMessageW SetLayeredWindowAttributes ChildWindowFromPoint AttachThreadInput SetActiveWindow GetDlgCtrlID SetMenuDefaultItem GetMenuItemCount InvalidateRgn SetClipboardData RegisterClipboardFormatW CopyImage GetSubMenu EnumDisplayMonitors EnumThreadWindows CreateDialogParamW DrawEdge AllowSetForegroundWindow GetSysColorBrush MsgWaitForMultipleObjects PostQuitMessage GetClassInfoW FindWindowW DestroyIcon MonitorFromWindow PeekMessageW CallNextHookEx GetPriorityClipboardFormat MsgWaitForMultipleObjectsEx IsDialogMessageW SendInput TranslateMessage MapDialogRect EndMenu InflateRect GetDialogBaseUnits DrawFocusRect OffsetRect GetNextDlgGroupItem SetMenuInfo GetDlgItemInt InsertMenuW IsCharAlphaW GetKeyboardState MonitorFromRect CountClipboardFormats GetDlgItemTextW DrawStateW GetKeyNameTextW GetWindow EnumChildWindows DrawTextExW GetMenuBarInfo CallWindowProcW GetMonitorInfoW ModifyMenuW GetMenuInfo MonitorFromPoint IsClipboardFormatAvailable WindowFromPoint keybd_event GetWindowThreadProcessId AdjustWindowRectEx ShowScrollBar NotifyWinEvent FindWindowExW GetClassNameA EnumDisplayDevicesW wsprintfW SetWindowPlacement FlashWindowEx CreateIconIndirect GetMessageW PtInRect DrawIconEx WindowFromDC GetAncestor EnumWindows GetClipboardData LoadIconW ValidateRect GetWindowTextW GetUpdateRect GetComboBoxInfo EndDialog GetIconInfo LoadStringW SetCursor FillRect WaitForInputIdle InvalidateRect IsZoomed GetMenuItemInfoW GetMenu GetCursorInfo EnableMenuItem GetSysColor MapWindowPoints LoadCursorW IsDlgButtonChecked GetWindowDC GetActiveWindow UnhookWindowsHookEx UpdateWindow IsWindowEnabled RegisterClassW DestroyWindow SetMenuItemBitmaps EnableWindow SetMenuItemInfoW EmptyClipboard DefWindowProcW GetWindowPlacement InsertMenuItemW GetParent GetWindowTextLengthW GetSystemMetrics IsIconic IsWindowVisible CheckMenuItem SendDlgItemMessageW SetFocus GetAsyncKeyState DialogBoxParamW GetClassNameW CheckDlgButton ReleaseDC ScreenToClient DestroyCursor GetCursor GetWindowRect DialogBoxIndirectParamW MessageBoxW GetDlgItem SetWindowPos SetDlgItemTextW SetTimer GetMessageExtraInfo PostMessageW EqualRect CreateWindowExW SystemParametersInfoW

ws2_32

send __WSAFDIsSet inet_addr select setsockopt WSAStartup WSAGetLastError connect htons gethostbyaddr socket ntohs ioctlsocket gethostname gethostbyname closesocket recv

winspool.drv

OpenPrinterW

rpcrt4

RpcStringFreeW UuidFromStringW UuidCreate UuidToStringW

netapi32

NetApiBufferFree NetUserGetInfo

gdiplus

GdipCreateMatrix GdipCreateFont GdipGetPropertyItemSize GdipGraphicsClear GdipDrawString GdipCreatePen2 GdipDeleteFontFamily GdipAddPathArc GdipDrawPath GdipGetPathFillMode GdipBitmapLockBits GdipDeleteFont GdipPathIterGetSubpathCount GdipGetPropertyIdList GdipAddPathBeziers GdipGetWorldTransform GdipGetPathWorldBounds GdipBitmapUnlockBits GdipSetCompositingMode GdipRestoreGraphics GdipSetSmoothingMode GdipSetImageAttributesColorMatrix GdipCreateBitmapFromHBITMAP GdipDrawImageRect GdipSetStringFormatHotkeyPrefix GdipCreateStringFormat GdipDrawImageRectRect GdipGetEmHeight GdipDrawImageI GdipSetStringFormatTrimming GdipCreateBitmapFromHICON GdipSetPathGradientWrapMode GdipReleaseDC GdipGetFontCollectionFamilyList GdipFillPath GdipGetCellAscent GdipSetPathGradientCenterColor GdipSetPathGradientPresetBlend GdipCreateCachedBitmap GdipSetPathGradientCenterPoint GdipSetInterpolationMode GdipCreatePen1 GdipRotateMatrix GdipDrawCachedBitmap GdipDeleteStringFormat GdipGetClip GdipSetPenStartCap GdipTranslateMatrix GdipSetTextureTransform GdipDisposeImageAttributes GdipIsOutlineVisiblePathPoint GdipStringFormatGetGenericTypographic GdipCreateBitmapFromScan0 GdipCreateImageAttributes GdipSetPenLineJoin GdipSetPathGradientTransform GdipGetImageEncodersSize GdipSetPenDashOffset GdipGetCellDescent GdipCreateTexture GdipSetLineWrapMode GdipGetPathGradientPointCount GdipSetPenDashArray GdipCreateFontFromLogfontA GdipGetImageHorizontalResolution GdipSetLinePresetBlend GdipGetFamilyName GdipGetImageEncoders GdipSetStringFormatLineAlign GdipCloneStringFormat GdipGetFontStyle GdipGetFamily GdipCreatePathGradientFromPath GdipGetImageGraphicsContext GdipGetDC GdipCreateFontFromDC GdipNewInstalledFontCollection GdipAddPathStringI GdipCreateTextureIAI GdipSetPathGradientSurroundColorsWithCount GdipFlattenPath GdipSetLineTransform GdipBitmapSetResolution GdipSetImageAttributesWrapMode GdipAddPathString GdiplusStartup GdipSetPenEndCap GdiplusShutdown GdipCreateLineBrush GdipWidenPath GdipGetFontSize GdipRotateTextureTransform GdipGetFontCollectionFamilyCount GdipCreateRegion GdipSetPenMiterLimit GdipCombineRegionPath GdipSetStringFormatAlign GdipCreateFromHDC GdipSetStringFormatFlags GdipSetPenDashCap197819 GdipDeleteCachedBitmap GdipCloneFontFamily GdipSetPenDashStyle GdipGetStringFormatFlags GdipSetWorldTransform GdipSetPageUnit GdipGetPenLineJoin GdipGetPenDashStyle GdipGetPenMiterLimit GdipGetPenStartCap GdipSetPenColor GdipSetPenLineCap197819 GdipSetMatrixElements GdipSetPenWidth GdipCreateRegionPath GdipGetPenWidth GdipGetPenEndCap GdipAddPathBezier GdipImageGetFrameDimensionsList GdipAddPathLine GdipGetImagePixelFormat GdipCloneBrush GdipSetPixelOffsetMode GdipAddPathEllipse GdipReversePath GdipResetClip GdipImageGetFrameCount GdipDrawEllipse GdipResetPath GdipWindingModeOutline GdipGetImageWidth GdipGetMatrixElements GdipCreatePath GdipDisposeImage GdipDeleteMatrix GdipDrawRectangle GdipGetPathLastPoint GdipTransformPath GdipGetPathTypes GdipDeletePath GdipCreatePathIter GdipDeletePathIter GdipStartPathFigure GdipFillRectangle GdipImageSelectActiveFrame GdipAddPathRectangle GdipGetPathPoints GdipResetWorldTransform GdipClosePathFigure GdipDeleteGraphics GdipTranslateWorldTransform GdipRotateWorldTransform GdipCreateSolidFill GdipRemovePropertyItem GdipImageRotateFlip GdipSetTextRenderingHint GdipCreateMatrix2 GdipAddPathPath GdipScaleWorldTransform GdipImageGetFrameDimensionsCount GdipGetPropertyCount GdipFillEllipse GdipMultiplyWorldTransform GdipDrawLine GdipDeletePen GdipGetImageHeight GdipSetClipRegion GdipIsVisiblePathPoint GdipGetPointCount GdipSetSolidFillColor GdipCreateBitmapFromStream GdipSaveImageToStream GdipGetImageVerticalResolution GdipPathIterNextSubpathPath GdipSaveGraphics GdipDeleteBrush GdipClonePath GdipCreateRegionRect GdipCreateFontFamilyFromName GdipDeleteRegion GdipAddPathLine2 GdipCloneImage GdipGetPropertyItem GdipMeasureString GdipSetPathFillMode GdipGetGenericFontFamilySansSerif

msimg32

GradientFill AlphaBlend

iphlpapi

GetAdaptersAddresses GetIpAddrTable

wininet

InternetAutodialHangup InternetGetConnectedState InternetAutodial InternetQueryOptionA

dnsapi

DnsQuery_W DnsRecordListFree

secur32

EncryptMessage FreeCredentialsHandle ApplyControlToken QueryContextAttributesW FreeContextBuffer DecryptMessage AcquireCredentialsHandleW InitializeSecurityContextW DeleteSecurityContext

crypt32

CryptQueryObject CertCloseStore CertFreeCertificateContext CertFindCertificateInStore CertVerifySubjectCertificateContext

wintrust

WinVerifyTrust

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-04_54c8a022cfcdd89622309c6d001ebf57_elex_floxif_glassworm_hijackloader_poet-rat_remcos_stop

PE Signature issue

PE Signature issue

imm32

kernel32

advapi32

comctl32

comdlg32

gdi32

ole32

oleaut32

shell32

shlwapi

user32

ws2_32

winspool.drv

rpcrt4

netapi32

gdiplus

msimg32

iphlpapi

wininet

dnsapi

secur32

crypt32

wintrust

generic