2026-07-11_69745cbed63a24e4963886cbe5ff8ba2_elex_stop

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-11_69745cbed63a24e4963886cbe5ff8ba2_elex_stop
Size 11.0MB
Sample260711-e55rwsdy6y
SHA256 95640a44d9d81380fdc4a003fde80c4e0a2234e862b56769e1a28202490fad73
MD5 69745cbed63a24e4963886cbe5ff8ba2
SHA1 6fd6a4a50d42d6c5553199838464dbac2a59dec7
SHA512 7fa662e5101f67682ffb3ab446068b6ccff33e27ee6751a2cc9182620ed49e3572471f27422fd82bfbf8d3d1b02d4ae79e501a9b176e7c9491e933bac856de90
SSDEEP 196608:mjVCUrilJP/DdOwpbF3jaPTlqkUBY6FSLuEzB:mjVCUAZ/bpbF3jETlqkUBYBP
TLSH
T1DFC68D21FBDAC0B5EA87B1B946AFB32E5256E7881B2409D3D1143E0BDDA07F15E361C1
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-11_69745cbed63a24e4963886cbe5ff8ba2_elex_stop

File Explorer

2026-07-11_69745cbed63a24e4963886cbe5ff8ba2_elex_stop

.exe 11.0MB

2026-07-11_69745cbed63a24e4963886cbe5ff8ba2_elex_stop

IMPHASH d3a0e2ce263915eb6eab704932dcebb1
SHA256 95640a44d9d81380fdc4a003fde80c4e0a2234e862b56769e1a28202490fad73
MD5 69745cbed63a24e4963886cbe5ff8ba2
SHA1 6fd6a4a50d42d6c5553199838464dbac2a59dec7
SHA512 7fa662e5101f67682ffb3ab446068b6ccff33e27ee6751a2cc9182620ed49e3572471f27422fd82bfbf8d3d1b02d4ae79e501a9b176e7c9491e933bac856de90
SSDEEP 196608:mjVCUrilJP/DdOwpbF3jaPTlqkUBY6FSLuEzB:mjVCUAZ/bpbF3jETlqkUBYBP
TLSH
T1DFC68D21FBDAC0B5EA87B1B946AFB32E5256E7881B2409D3D1143E0BDDA07F15E361C1
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

7641938

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

D:\vss-od\Silkroad\Client\Out\SRO_Client.pdb

gdi32

CreateFontIndirectA SetTextColor SetBkMode SetPixel GetPixel SetDIBColorTable CreateCompatibleDC RealizePalette SelectPalette SetPaletteEntries GetTextMetricsA CreateDIBSection CreateFontA GetDeviceGammaRamp GetTextExtentPoint32W GetTextExtentPoint32A GetStockObject GetDIBits GetObjectA SetBkColor CreateSolidBrush RemoveFontResourceA AddFontResourceA BitBlt DeleteObject SetDeviceGammaRamp SelectObject CreatePalette GetGlyphOutlineW DeleteDC

advapi32

GetUserNameA OpenProcessToken GetTokenInformation EqualSid RegCloseKey RegSetValueExA RegCreateKeyExA FreeSid RegOpenKeyExA RegOpenKeyA RegQueryValueExA AllocateAndInitializeSid

user32

CloseClipboard GetClipboardData OpenClipboard IsClipboardFormatAvailable CreateWindowExA IsCharAlphaW IsCharAlphaNumericW SetCursorPos ScreenToClient GetCursorPos GetActiveWindow SetRect PostMessageA GetWindowThreadProcessId EndDialog SetWindowPos MessageBoxA GetWindowRect HideCaret GetKeyState SendMessageA GetWindow IsWindow FindWindowA SetFocus CallNextHookEx SetCursor GetWindowTextA wsprintfA DefWindowProcA PostQuitMessage ChangeDisplaySettingsA SystemParametersInfoA EnumDisplaySettingsA ClipCursor GetClassLongA ShowCaret SetMenu DestroyAcceleratorTable LoadMenuA RegisterClassA DestroyMenu GetIconInfo EnableWindow CheckRadioButton SetWindowTextA AppendMenuA CreatePopupMenu CreateMenu CharNextExA CallWindowProcA UnhookWindowsHookEx SetWindowLongA GetWindowLongA SetWindowsHookExA PtInRect AdjustWindowRect GetClientRect GetDesktopWindow RegisterClassExA LoadCursorA DestroyWindow LoadIconA ShowWindow DispatchMessageA TranslateMessage TranslateAcceleratorA GetMessageA PeekMessageA RegisterHotKey LoadAcceleratorsA SetForegroundWindow LoadStringA MoveWindow GetKeyboardLayout GetFocus GetMenu IsDlgButtonChecked GetDC ReleaseDC UpdateWindow MessageBoxW CharNextA CharNextW DialogBoxParamA GetSystemMetrics GetDlgItem SetWindowTextW

imm32

ImmGetCandidateWindow ImmSetConversionStatus ImmGetConversionStatus ImmNotifyIME ImmSetCandidateWindow ImmGetCompositionStringW ImmGetContext ImmReleaseContext ImmGetProperty ImmAssociateContext

kernel32

LCMapStringA GetTimeZoneInformation IsValidCodePage GetOEMCP GetCPInfo HeapSize LCMapStringW HeapCreate HeapDestroy HeapReAlloc VirtualAlloc VirtualFree FatalAppExitA SetHandleCount GetFileType GetConsoleCP GetConsoleMode SetConsoleCtrlHandler FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW GetStdHandle InterlockedExchange Sleep CloseHandle WriteFile CreateFileW ReadFile GetFileSize CreateFileA lstrlenA GetLastError InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection SetFilePointer WideCharToMultiByte InterlockedIncrement InterlockedDecrement ResetEvent CreateEventA DeleteFileA CreateDirectoryA SetCurrentDirectoryA MultiByteToWideChar SetEvent WaitForSingleObject CreateThread OutputDebugStringA GetTickCount GetModuleFileNameA VirtualQuery lstrcmpW GetACP GetVersion GlobalUnlock GlobalLock Beep GetProcAddress GetModuleHandleA CreateMutexA WinExec GetCurrentProcess GetCurrentProcessId GetLocalTime SetUnhandledExceptionFilter CompareStringA FindClose FindFirstFileA FileTimeToSystemTime FileTimeToLocalFileTime GetFileTime GetSystemDirectoryA FindNextFileA SetFileAttributesA GetCommandLineA FreeLibrary LoadLibraryA GetLocaleInfoA GetThreadLocale GetVersionExA lstrcmpA GetSystemInfo IsProcessorFeaturePresent MapViewOfFile CreateFileMappingA UnmapViewOfFile LockResource LoadResource SizeofResource FindResourceA FindResourceW GetFullPathNameA lstrcmpiA HeapAlloc GetProcessHeap HeapFree GetCurrentThread TlsFree TlsSetValue TlsAlloc TlsGetValue IsDebuggerPresent TerminateProcess GetStartupInfoA UnhandledExceptionFilter ExitProcess GetSystemTimeAsFileTime RaiseException RtlUnwind GlobalFree GlobalAlloc GlobalMemoryStatus SetLastError Process32First Process32Next CreateToolhelp32Snapshot Module32First Module32Next CopyFileA GetFileAttributesA GetCurrentDirectoryA QueryPerformanceCounter GetTimeFormatA GetDateFormatA GetUserDefaultLCID EnumSystemLocalesA IsValidLocale GetStringTypeA GetStringTypeW GetLocaleInfoW SetStdHandle FlushFileBuffers WriteConsoleA GetConsoleOutputCP WriteConsoleW SetEndOfFile CompareStringW SetEnvironmentVariableA TerminateThread SetThreadPriority ExitThread lstrcpyA lstrcatA GetExitCodeThread VirtualProtect GetSystemDefaultLangID _lwrite QueryPerformanceFrequency MulDiv lstrcpynA ResumeThread GetWindowsDirectoryA SuspendThread CreateIoCompletionPort PostQueuedCompletionStatus GetQueuedCompletionStatus FlushViewOfFile ReleaseSemaphore SleepEx FlushInstructionCache GetCurrentThreadId

shell32

ShellExecuteW ShellExecuteA SHGetSpecialFolderPathA ExtractIconExA

wininet

InternetCloseHandle InternetGetLastResponseInfoA FtpSetCurrentDirectoryA FtpCreateDirectoryA FtpRemoveDirectoryA FtpDeleteFileA FtpRenameFileA InternetOpenA FtpOpenFileA FtpGetFileA FtpGetCurrentDirectoryA InternetFindNextFileA FtpFindFirstFileA DeleteUrlCacheEntry FtpPutFileA InternetCrackUrlA InternetConnectA InternetWriteFile

urlmon

URLDownloadToFileA

ws2_32

inet_ntoa WSAGetOverlappedResult gethostname WSAResetEvent WSAWaitForMultipleEvents gethostbyaddr ntohs inet_addr WSACleanup closesocket bind htonl htons socket WSACloseEvent WSARecvFrom WSASendTo WSAStartup getsockname select WSAGetLastError connect ioctlsocket send WSACreateEvent recvfrom gethostbyname sendto accept getpeername getsockopt WSASend listen WSASocketA shutdown WSAIoctl WSARecv setsockopt WSASetEvent

version

VerQueryValueA GetFileVersionInfoSizeA GetFileVersionInfoA

ddraw

DirectDrawCreateEx

iphlpapi

GetAdaptersInfo GetTcpTable

winmm

timeGetTime mmioAscend mmioRead mmioDescend mmioGetInfo mmioCreateChunk mmioSeek mmioSetInfo mmioAdvance mmioWrite mmioClose mmioOpenA timeSetEvent timeKillEvent

d3d9

Direct3DCreate9

ole32

CoCreateGuid CoUninitialize CoInitialize

dsound

ord11

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-11_69745cbed63a24e4963886cbe5ff8ba2_elex_stop

gdi32

advapi32

user32

imm32

kernel32

shell32

wininet

urlmon

ws2_32

version

ddraw

iphlpapi

winmm

d3d9

ole32

dsound

generic