2026-07-06_0830d09be1daa08c468c493b0f374ac3_elex_maze

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-06_0830d09be1daa08c468c493b0f374ac3_elex_maze
Size 12.1MB
Sample260706-mn992sdx9w
SHA256 e40eee6ca296f56649975c8fb0c970a4efb9feddaf8084909ee1c1cc1a1738a0
MD5 0830d09be1daa08c468c493b0f374ac3
SHA1 55cedeef940db63a5f06a8acaeea79c6d78dd4e2
SHA512 5639803cdfb55661f20766ad491a0092df34f20f3eeddea5433aed3f7ca2299117522d9a8d79ae0582b6e24b5581be341a400be54abec90eb9a914458204c91a
SSDEEP 98304:cpWOOrsnohWUsHG4MBytZtFiMdveS2zwxORe/PS6RHP6xUc3z:2OrVUfPOdz
TLSH
T165D61807FEA184A3F474277E08704A990D27645EEC347EB33064AF63A7DD28125AB797
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-06_0830d09be1daa08c468c493b0f374ac3_elex_maze

File Explorer

2026-07-06_0830d09be1daa08c468c493b0f374ac3_elex_maze

.exe 12.1MB

2026-07-06_0830d09be1daa08c468c493b0f374ac3_elex_maze

IMPHASH 650a59e81527e3025a2f877430860d49
SHA256 e40eee6ca296f56649975c8fb0c970a4efb9feddaf8084909ee1c1cc1a1738a0
MD5 0830d09be1daa08c468c493b0f374ac3
SHA1 55cedeef940db63a5f06a8acaeea79c6d78dd4e2
SHA512 5639803cdfb55661f20766ad491a0092df34f20f3eeddea5433aed3f7ca2299117522d9a8d79ae0582b6e24b5581be341a400be54abec90eb9a914458204c91a
SSDEEP 98304:cpWOOrsnohWUsHG4MBytZtFiMdveS2zwxORe/PS6RHP6xUc3z:2OrVUfPOdz
TLSH
T165D61807FEA184A3F474277E08704A990D27645EEC347EB33064AF63A7DD28125AB797
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

429529

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

F:\jnks\workspace\RoH_Documentaion_Rollout_BSMI_Canopus\HPScanExt\SxS\src\Release\HPScan.pdb

kernel32

SetFileAttributesW MoveFileExW GetSystemDirectoryW DeviceIoControl GetFileTime GlobalUnlock GlobalLock ProcessIdToSessionId LocalAlloc GetComputerNameExW FindFirstFileW GetSystemDefaultLCID FlushViewOfFile OpenFileMappingW GlobalMemoryStatusEx CreatePipe TryEnterCriticalSection GetEnvironmentVariableW GetFileSizeEx GetShortPathNameW CreateDirectoryW OpenMutexW GetFileAttributesW GetSystemTime TerminateThread GetExitCodeProcess GetExitCodeThread CreateProcessW GetVersionExW HeapDestroy DecodePointer DeleteCriticalSection InitializeCriticalSectionAndSpinCount RemoveDirectoryW GetPrivateProfileStringW GetPrivateProfileStringA WritePrivateProfileStringA HeapAlloc HeapFree HeapReAlloc HeapSize GetProcessHeap WaitForMultipleObjects GetModuleFileNameW ExpandEnvironmentStringsW InitializeCriticalSection GetCurrentProcessId MultiByteToWideChar EnterCriticalSection LeaveCriticalSection GetTickCount CreateFileW Sleep SetFilePointer WriteFile CloseHandle OutputDebugStringW GetCurrentThreadId QueryPerformanceCounter OpenProcess GetFileAttributesExW GetCommandLineW GetTempFileNameW GetLongPathNameW SearchPathW FormatMessageW LocalFree CreateMutexW WaitForSingleObject CreateFileMappingW MapViewOfFile GetLastError UnmapViewOfFile SetLastError LoadLibraryW GetProcAddress FreeLibrary QueryPerformanceFrequency EncodePointer GlobalAlloc GlobalFree LoadResource LockResource SizeofResource FindResourceW FindResourceExW DeleteFileW SetEvent GetFileSize GetUserDefaultUILanguage SetThreadUILanguage CreateEventW OpenEventW SetThreadExecutionState GetDiskFreeSpaceExW CopyFileW GetTempPathW GetSystemTimeAsFileTime IsDebuggerPresent IsProcessorFeaturePresent ExitProcess GetModuleHandleExW AreFileApisANSI WideCharToMultiByte GetSystemDefaultLangID GetUserDefaultLangID GetSystemDefaultUILanguage GetLocaleInfoW GetWindowsDirectoryW WritePrivateProfileStringW FindFirstFileExW FindNextFileW FindClose MoveFileW VerSetConditionMask VerifyVersionInfoW GetComputerNameW ResetEvent GetLocalTime GetDateFormatW GetUserDefaultLCID GetCurrentThread GetStdHandle GetFileType GetStartupInfoW GetEnvironmentStringsW FreeEnvironmentStringsW UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetModuleHandleW GetTimeZoneInformation IsValidCodePage GetACP GetOEMCP GetCPInfo GetTimeFormatW CompareStringW LCMapStringW IsValidLocale EnumSystemLocalesW RtlUnwind LoadLibraryExW GetStringTypeW CreateThread ExitThread MulDiv GetConsoleCP GetConsoleMode SetFilePointerEx SetThreadPriority SetStdHandle WriteConsoleW FlushFileBuffers ReadFile FileTimeToLocalFileTime GetFileInformationByHandle PeekNamedPipe FileTimeToSystemTime SetEnvironmentVariableA ReadConsoleW GetDriveTypeW SystemTimeToTzSpecificLocalTime SetEndOfFile GetFullPathNameW SetCurrentDirectoryW GetCurrentDirectoryW ReleaseMutex RaiseException

user32

DispatchMessageA TranslateMessage DispatchMessageW GetMessageA IsWindowUnicode PeekMessageW SystemParametersInfoW GetSystemMetrics MsgWaitForMultipleObjects GetMessageW DisableProcessWindowsGhosting GetKeyState SendMessageCallbackW SetTimer RegisterWindowMessageW LoadIconW ExitWindowsEx CloseDesktop OpenDesktopW SetThreadDesktop GetThreadDesktop SetProcessWindowStation GetProcessWindowStation CloseWindowStation OpenWindowStationW MsgWaitForMultipleObjectsEx AllowSetForegroundWindow DestroyIcon GetAsyncKeyState WaitForInputIdle

winhttp

WinHttpOpen WinHttpQueryHeaders WinHttpConnect WinHttpOpenRequest WinHttpCloseHandle WinHttpCrackUrl WinHttpSetOption WinHttpReadData WinHttpAddRequestHeaders WinHttpSendRequest WinHttpWriteData WinHttpQueryDataAvailable WinHttpGetProxyForUrl WinHttpReceiveResponse

gdiplus

GdipCloneBitmapAreaI GdipCreateBitmapFromFile GdipGetImageEncodersSize GdipGetImageEncoders GdiplusShutdown GdipImageRotateFlip GdipCreateImageAttributes GdipDisposeImageAttributes GdipCreateBitmapFromScan0 GdipBitmapLockBits GdipBitmapUnlockBits GdipFree GdipAlloc GdipDisposeImage GdipCloneImage GdipSaveImageToFile GdipSaveImageToStream GdipSaveAdd GdipSaveAddImage GdipGetImageWidth GdipGetImageHeight GdipGetImageHorizontalResolution GdipGetImagePixelFormat GdiplusStartup

shlwapi

PathFileExistsW PathFindExtensionW PathIsFileSpecW PathFindFileNameW PathRemoveFileSpecW PathIsDirectoryW SHCreateStreamOnFileEx PathRemoveExtensionW

psapi

EnumProcessModules EnumProcesses GetModuleFileNameExW GetModuleBaseNameW

advapi32

RegEnumKeyExW RegOpenKeyExW RegCloseKey RegCreateKeyExW RegQueryValueExW OpenProcessToken CheckTokenMembership RegDeleteKeyW RegSetValueExW RegDeleteValueW RegEnumValueW RevertToSelf DuplicateToken ImpersonateLoggedOnUser SetSecurityDescriptorDacl InitializeSecurityDescriptor ConvertStringSecurityDescriptorToSecurityDescriptorW AdjustTokenPrivileges LookupPrivilegeValueW GetUserNameW RegQueryInfoKeyW

shell32

SHOpenFolderAndSelectItems ExtractIconW ShellExecuteExW SHGetSpecialFolderPathW ord190 CommandLineToArgvW ShellExecuteW SHGetFolderPathW

ole32

CreateStreamOnHGlobal CoTaskMemAlloc PropVariantClear FreePropVariantArray CoInitialize CLSIDFromString CoCreateInstance ProgIDFromCLSID CoUninitialize

oleaut32

SysFreeString SystemTimeToVariantTime VariantTimeToSystemTime VariantClear SysAllocString

version

GetFileVersionInfoW GetFileVersionInfoSizeW VerQueryValueW

secur32

GetUserNameExW

generic

count=6, id=199, version=41118,

count=1, id=132, productName=VS2008 SP1 build 30729, version=30729,

count=7, id=225, version=20806,

count=63, id=223, productName=VS2013 build 21005, version=21005,

count=33, productName=Unmarked objects (old),

count=111, id=224, productName=VS2013 UPD3 build 30723, version=30723,

count=41, id=225, productName=VS2013 UPD3 build 30723, version=30723,

count=278, id=224, productName=VS2013 build 21005, version=21005,

count=110, id=225, productName=VS2013 build 21005, version=21005,

count=5, id=131, productName=VS2008 SP1 build 30729, version=30729,

count=29, id=147, productName=VS2008 SP1 build 30729, version=30729,

count=330, id=1, productName=Unmarked objects,

count=60, id=229, version=31101,

count=1, id=220, productName=VS2013 UPD4 build 31101, version=31101,

count=1, id=219, productName=VS2013 build 21005, version=21005,

count=1, id=151,

count=1, id=222, productName=VS2013 UPD4 build 31101, version=31101,