2026-08-03_3b55cfecd91914c54521a23ffdf2cd2d_elex_maze

General

Target
2026-08-03_3b55cfecd91914c54521a23ffdf2cd2d_elex_maze
Size 1.7MB
Sample260804-pkbcnaem9x
SHA256 38e1cbc656a7dd97787c7840a90b47d692ac19ce4f0d9e0b3b364ba099ff38f6
MD5 3b55cfecd91914c54521a23ffdf2cd2d
SHA1 c602d976914cfef0e63fbf7b3509d7cbd87114d9
SHA512 c8c3ad1e9cb67806d0fa6b1b896bb8efb38c00fcabb77b9d455d504ceb574fd0be54a0fa5612917cbeccc66ad8acb0589818987246f964e3da669dc2e350f051
SSDEEP 3072:TxgS8Snf6s6eCVKUfz8pISQ++rmBSrSe/+QcMSrSe/+90vJF:+XEjCVg/Q3rSe/QLrSe/ZRF
TLSH
T18585BF2275E68031D3935B3E4C34DF490A6C7DA18AF0A8DB77D49A0E8E715C18636BE7
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-03_3b55cfecd91914c54521a23ffdf2cd2d_elex_maze

File Explorer

2026-08-03_3b55cfecd91914c54521a23ffdf2cd2d_elex_maze

.exe 1.7MB

2026-08-03_3b55cfecd91914c54521a23ffdf2cd2d_elex_maze

IMPHASH 2987c11657f01e3ac0640de00fb0c916
SHA256 38e1cbc656a7dd97787c7840a90b47d692ac19ce4f0d9e0b3b364ba099ff38f6
MD5 3b55cfecd91914c54521a23ffdf2cd2d
SHA1 c602d976914cfef0e63fbf7b3509d7cbd87114d9
SHA512 c8c3ad1e9cb67806d0fa6b1b896bb8efb38c00fcabb77b9d455d504ceb574fd0be54a0fa5612917cbeccc66ad8acb0589818987246f964e3da669dc2e350f051
SSDEEP 3072:TxgS8Snf6s6eCVKUfz8pISQ++rmBSrSe/+QcMSrSe/+90vJF:+XEjCVg/Q3rSe/QLrSe/ZRF
TLSH
T18585BF2275E68031D3935B3E4C34DF490A6C7DA18AF0A8DB77D49A0E8E715C18636BE7
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

35240

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

c:\91\level\Feed\98\13\60\Train\Swim\40\20\25\less\2\Joboffer.pdb

kernel32

GetEnvironmentVariableW GetDateFormatW FindResourceW QueryPerformanceCounter GetModuleHandleW OpenProcess Sleep GetVersionExW CreateFileW OpenMutexW LocalAlloc RemoveDirectoryW VirtualProtect GetWindowsDirectoryW LocalFree GetSystemTime GetVolumeInformationW GetStringTypeW WriteConsoleW OutputDebugStringW LCMapStringW HeapReAlloc GetCPInfo GetOEMCP GetACP IsValidCodePage LoadLibraryExW EncodePointer DecodePointer CloseHandle GetLastError GetCommandLineW RaiseException RtlUnwind IsDebuggerPresent IsProcessorFeaturePresent GetFileType GetProcAddress ExitProcess GetModuleHandleExW AreFileApisANSI MultiByteToWideChar WideCharToMultiByte HeapSize HeapFree SetStdHandle EnterCriticalSection LeaveCriticalSection GetStdHandle DeleteCriticalSection GetStartupInfoW HeapAlloc SetLastError GetCurrentThreadId GetProcessHeap GetModuleFileNameW WriteFile GetCurrentProcessId GetSystemTimeAsFileTime GetEnvironmentStringsW FreeEnvironmentStringsW UnhandledExceptionFilter SetUnhandledExceptionFilter InitializeCriticalSectionAndSpinCount GetCurrentProcess TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetConsoleCP GetConsoleMode SetEndOfFile ReadFile ReadConsoleW SetFilePointerEx FlushFileBuffers

user32

CallWindowProcW GetWindowTextLengthW GetFocus ExitWindowsEx SetFocus GetClassInfoExW InflateRect RegisterClassExW IntersectRect GetWindowLongW AppendMenuW GetCursorPos EndDeferWindowPos

uxtheme

CloseThemeData

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-03_3b55cfecd91914c54521a23ffdf2cd2d_elex_maze

kernel32

user32

uxtheme

generic