2026-07-27_ff47debccac4bd9e60a64376c9a11476_amadey_elex_play

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-27_ff47debccac4bd9e60a64376c9a11476_amadey_elex_play
Size 14.5MB
Sample260727-d775csvepc
SHA256 ec56bbb6b50f7d029b4c739c95c8e6e07928af8ffbd7263fc7f39fd5cf5cbd4e
MD5 ff47debccac4bd9e60a64376c9a11476
SHA1 08b649aa20fce2350f1c7e3c9a40f39a583d77f2
SHA512 bb26e1727b519a7e791f52b0821cea4ca87947176b1c481a3dbba521c8692ae572f4fd1125d3c2ad45103bbaa0e849b0cce465178fd2c3a9514797d048f4db66
SSDEEP 393216:RxdrR0T74JKOAL4jKsqBfFH8IPu5WbmeEp1:R7rRA74JnAL4jyNlBu5+meE
TLSH
T1CBE6334D9580E4A5C4DD793C4BB26EBA4E6F39F0E3B661DB3B854BF145301CB9A31A08
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-27_ff47debccac4bd9e60a64376c9a11476_amadey_elex_play

File Explorer

2026-07-27_ff47debccac4bd9e60a64376c9a11476_amadey_elex_play

.exe 14.5MB

2026-07-27_ff47debccac4bd9e60a64376c9a11476_amadey_elex_play

IMPHASH b4d58cf49de9fe16e5238772e9163da6
SHA256 ec56bbb6b50f7d029b4c739c95c8e6e07928af8ffbd7263fc7f39fd5cf5cbd4e
MD5 ff47debccac4bd9e60a64376c9a11476
SHA1 08b649aa20fce2350f1c7e3c9a40f39a583d77f2
SHA512 bb26e1727b519a7e791f52b0821cea4ca87947176b1c481a3dbba521c8692ae572f4fd1125d3c2ad45103bbaa0e849b0cce465178fd2c3a9514797d048f4db66
SSDEEP 393216:RxdrR0T74JKOAL4jKsqBfFH8IPu5WbmeEp1:R7rRA74JnAL4jyNlBu5+meE
TLSH
T1CBE6334D9580E4A5C4DD793C4BB26EBA4E6F39F0E3B661DB3B854BF145301CB9A31A08
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

58498

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

F:\_Proyectos\Sources_NET\GBSET SOURCES\Gunbound Graphic Options - Oficial-New\Release\Gunbound Graphic Options.pdb

kernel32

SetFileAttributesW MultiByteToWideChar GetLastError LockResource DeleteFileW CloseHandle LoadResource FindResourceW ReadFile GetModuleFileNameW SetFilePointer SetEndOfFile GlobalAlloc GlobalFree GetProcAddress GlobalLock GetFileSize ExitProcess GetModuleHandleW CopyFileW lstrcmpiW GlobalUnlock WriteConsoleW HeapSize GetStringTypeW GetProcessHeap SetEnvironmentVariableW GetFileAttributesW GetEnvironmentStringsW FindClose GetCommandLineW GetCommandLineA GetCPInfo GetOEMCP GetACP IsValidCodePage FindFirstFileExW SetFilePointerEx GetConsoleMode GetConsoleOutputCP FlushFileBuffers GetTimeZoneInformation SetStdHandle LCMapStringW CompareStringW VirtualProtect InitializeCriticalSectionEx FlsFree FreeEnvironmentStringsW CreateFileW GetTempPathW RemoveDirectoryW WriteFile FindNextFileW FindFirstFileW SizeofResource FlsSetValue FlsGetValue FlsAlloc WideCharToMultiByte CreateDirectoryW HeapAlloc HeapFree HeapReAlloc GetStdHandle GetModuleHandleExW DecodePointer GetFileType LoadLibraryExW FreeLibrary UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent IsDebuggerPresent GetStartupInfoW QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead RtlUnwind RaiseException SetLastError EncodePointer EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree

user32

LoadImageW DialogBoxParamW GetParent PostQuitMessage CheckDlgButton GetDlgItem GetClientRect wsprintfW BeginPaint LoadCursorW LoadIconW TranslateMessage TranslateAcceleratorW IsDlgButtonChecked GetSysColor SendDlgItemMessageW EndPaint MessageBoxW SetCursor SendMessageW GetDlgCtrlID GetMessageW DefWindowProcW MonitorFromPoint GetWindowRect DestroyWindow SetWindowPos GetMonitorInfoW EndDialog RegisterClassExW LoadAcceleratorsW LoadStringW wsprintfA DispatchMessageW EnableWindow

gdi32

DeleteObject

advapi32

RegOpenKeyExW RegCloseKey RegCreateKeyExW RegSetValueExW RegQueryValueExW

shell32

ShellExecuteW

ole32

CreateStreamOnHGlobal

comctl32

InitCommonControlsEx

gdiplus

GdipDrawImageRectRectI GdipCreateBitmapFromScan0 GdipGetImageWidth GdipDeleteGraphics GdipGetImageGraphicsContext GdipFree GdipSetPixelOffsetMode GdipCreateHBITMAPFromBitmap GdipGraphicsClear GdipSetInterpolationMode GdipSetSmoothingMode GdipDisposeImage GdipAlloc GdipCreateBitmapFromStream GdipCloneImage GdipGetImageHeight GdiplusShutdown GdiplusStartup

Name

.text

Size

115KB

Virtual Size

115KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

45KB

Virtual Size

44KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

3KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.fptable

Size

512B

Virtual Size

128B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

14.4MB

Virtual Size

14.4MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

6KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-27_ff47debccac4bd9e60a64376c9a11476_amadey_elex_play

kernel32

user32

gdi32

advapi32

shell32

ole32

comctl32

gdiplus

generic