2026-07-09_3fd4ee63e7c99d337b9ca498baa1fb57_amadey_elex_play

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-09_3fd4ee63e7c99d337b9ca498baa1fb57_amadey_elex_play
Size 1.3MB
Sample260709-cremfacy2t
SHA256 48dc66ae650875f8d56999f7d03d20ae63b52db7de0ef1101dcd12e08fbf9c0d
MD5 3fd4ee63e7c99d337b9ca498baa1fb57
SHA1 166dea0092285192078b8ea699efff911a2b7bc7
SHA512 8f74a738a1a7ba2dc0117fbb4a6091a378103c2f850744f1cb7ce67ca6e47d613cd517ab2ee54839a1b7cc491236bf51daff8cd2c1766cfa334d7d4d8d5be725
SSDEEP 12288:RaGGhkbXB+3pm34XiPvrLr0Ci41UO5wHPdjIpTEx/Mz0gLeAfsVyqBn9r2ilJ:gG/bXBIdSnnrFb4PM4MYgLxEVyGLD
TLSH
T1FD55E00377E800ACF8F32A3059B56765A93EBCB2E972DB6E1780155D2F326418D51B3B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-09_3fd4ee63e7c99d337b9ca498baa1fb57_amadey_elex_play

File Explorer

2026-07-09_3fd4ee63e7c99d337b9ca498baa1fb57_amadey_elex_play

.exe 1.3MB

2026-07-09_3fd4ee63e7c99d337b9ca498baa1fb57_amadey_elex_play

IMPHASH 703ff56bdeea42466c9707ed3f98c291
SHA256 48dc66ae650875f8d56999f7d03d20ae63b52db7de0ef1101dcd12e08fbf9c0d
MD5 3fd4ee63e7c99d337b9ca498baa1fb57
SHA1 166dea0092285192078b8ea699efff911a2b7bc7
SHA512 8f74a738a1a7ba2dc0117fbb4a6091a378103c2f850744f1cb7ce67ca6e47d613cd517ab2ee54839a1b7cc491236bf51daff8cd2c1766cfa334d7d4d8d5be725
SSDEEP 12288:RaGGhkbXB+3pm34XiPvrLr0Ci41UO5wHPdjIpTEx/Mz0gLeAfsVyqBn9r2ilJ:gG/bXBIdSnnrFb4PM4MYgLxEVyGLD
TLSH
T1FD55E00377E800ACF8F32A3059B56765A93EBCB2E972DB6E1780155D2F326418D51B3B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

31241

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

BraveUpdate_unsigned.pdb

advapi32

RegOpenKeyExW

kernel32

SizeofResource HeapFree GetCommandLineW GetModuleFileNameW InitializeCriticalSectionAndSpinCount HeapSize GetLastError GetFileAttributesExW LockResource HeapReAlloc RaiseException FindResourceExW LoadResource FindResourceW HeapAlloc DecodePointer HeapDestroy GetProcAddress DeleteCriticalSection GetProcessHeap GetModuleHandleW FreeLibrary LoadLibraryExW CloseHandle CreateFileW SetFilePointerEx GetConsoleMode GetConsoleOutputCP FlushFileBuffers GetStringTypeW SetStdHandle IsDebuggerPresent OutputDebugStringW EnterCriticalSection LeaveCriticalSection ReleaseSRWLockExclusive AcquireSRWLockExclusive WakeAllConditionVariable SleepConditionVariableSRW UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent GetStartupInfoW QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead SetLastError RtlUnwind TlsAlloc TlsGetValue TlsSetValue TlsFree EncodePointer ExitProcess GetModuleHandleExW GetStdHandle WriteFile FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo GetCommandLineA MultiByteToWideChar WideCharToMultiByte GetEnvironmentStringsW FreeEnvironmentStringsW LCMapStringW GetFileType WriteConsoleW

shell32

SHGetFolderPathW

user32

CharLowerBuffW

shlwapi

SHQueryValueExW PathAppendW PathRemoveFileSpecW

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-09_3fd4ee63e7c99d337b9ca498baa1fb57_amadey_elex_play

advapi32

kernel32

shell32

user32

shlwapi

generic