2026-07-30_cc5157ea7381df81b385935f3392ff11_amadey_elex_hellokitty

General

Target
2026-07-30_cc5157ea7381df81b385935f3392ff11_amadey_elex_hellokitty
Size 1.5MB
Sample260730-vhdb5asflc
SHA256 534b0d80e1e18c46eaacab65c50cbc4a2380475267646e72762924c1b7e7c371
MD5 cc5157ea7381df81b385935f3392ff11
SHA1 0068f725a747fc9c4759631604c53c2f9b95e211
SHA512 ce58670bdb92f2587a64c3776915400635c18ce47a70c33013505eb4eed911d62bd0995ef915bd91c89f0d4eeb1ef2af551cfd132d18a1472564d75b5f9442bb
SSDEEP 12288:AYtwmwKIHtM6hct28uP18WR/FW2Gb8JTCMMK7LIFYJ1WroCrwah4:Ac7IH6mctvE/BT76+1NCE
TLSH
T1E9651241B4C280B0D9B70A7108A4E2B1D92DFDB42D665ED77359463B4F302D1AE2BDBB
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-30_cc5157ea7381df81b385935f3392ff11_amadey_elex_hellokitty

File Explorer

2026-07-30_cc5157ea7381df81b385935f3392ff11_amadey_elex_hellokitty

.exe 1.5MB

2026-07-30_cc5157ea7381df81b385935f3392ff11_amadey_elex_hellokitty

IMPHASH e2bb1f683b494254dbd6bdeffa82c8f6
SHA256 534b0d80e1e18c46eaacab65c50cbc4a2380475267646e72762924c1b7e7c371
MD5 cc5157ea7381df81b385935f3392ff11
SHA1 0068f725a747fc9c4759631604c53c2f9b95e211
SHA512 ce58670bdb92f2587a64c3776915400635c18ce47a70c33013505eb4eed911d62bd0995ef915bd91c89f0d4eeb1ef2af551cfd132d18a1472564d75b5f9442bb
SSDEEP 12288:AYtwmwKIHtM6hct28uP18WR/FW2Gb8JTCMMK7LIFYJ1WroCrwah4:Ac7IH6mctvE/BT76+1NCE
TLSH
T1E9651241B4C280B0D9B70A7108A4E2B1D92DFDB42D665ED77359463B4F302D1AE2BDBB
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

11486

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

H:\rc_v12_i18n_202509_branch\Build\Release\WPSOffice\office6\addons\chromehost\chromelauncher.pdb

kernel32

GetEnvironmentVariableW SetEnvironmentVariableW FreeLibrary GetProcAddress LoadLibraryW GetFileAttributesW GetModuleFileNameW WriteConsoleW RaiseException GetLastError GetSystemInfo VirtualProtect VirtualQuery GetModuleHandleW LoadLibraryExA QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW IsProcessorFeaturePresent GetCurrentProcess TerminateProcess RtlUnwind SetLastError EncodePointer EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree LoadLibraryExW GetStdHandle WriteFile ExitProcess GetModuleHandleExW GetCommandLineA GetCommandLineW HeapAlloc HeapFree FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo MultiByteToWideChar WideCharToMultiByte GetEnvironmentStringsW FreeEnvironmentStringsW SetStdHandle GetFileType GetStringTypeW CompareStringW LCMapStringW GetProcessHeap HeapSize HeapReAlloc FlushFileBuffers GetConsoleCP GetConsoleMode SetFilePointerEx CreateFileW CloseHandle DecodePointer

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-30_cc5157ea7381df81b385935f3392ff11_amadey_elex_hellokitty

kernel32

generic