2026-08-04_ffb8ecfd7b2cfbabb10decd0687ca8c3_amadey_elex_play

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-04_ffb8ecfd7b2cfbabb10decd0687ca8c3_amadey_elex_play
Size 1.4MB
Sample260804-qk4vmsbe45
SHA256 96a23e97a04a372234175ebfaa12ae19f6121a5559f02183fa07f74e743d6237
MD5 ffb8ecfd7b2cfbabb10decd0687ca8c3
SHA1 c653e856adc12e71c2309238ca8dbec25a4cb0f4
SHA512 2d56f796e95d6633d3ed4efa0363249b9e55dcbedc14fc9218d5c37f8b52027c9c6da392b78b7080e99676a6fedd1fad882750303282cd4dd6e14824b72ab4d7
SSDEEP 12288:jaGGhkbXB+3pgGyS0VTBG//sop9bw/W1wR/kjy6FtgQAdJsg0HjoMWx:uG/bXBIAnQ/tbw/2Mkjy6Fr7g0ox
TLSH
T12065F00373F4456DF8F32A3158B15722AA3FBCB1DA62DB6E2780055D2F352908991B7B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-04_ffb8ecfd7b2cfbabb10decd0687ca8c3_amadey_elex_play

File Explorer

2026-08-04_ffb8ecfd7b2cfbabb10decd0687ca8c3_amadey_elex_play

.exe 1.4MB

2026-08-04_ffb8ecfd7b2cfbabb10decd0687ca8c3_amadey_elex_play

IMPHASH 703ff56bdeea42466c9707ed3f98c291
SHA256 96a23e97a04a372234175ebfaa12ae19f6121a5559f02183fa07f74e743d6237
MD5 ffb8ecfd7b2cfbabb10decd0687ca8c3
SHA1 c653e856adc12e71c2309238ca8dbec25a4cb0f4
SHA512 2d56f796e95d6633d3ed4efa0363249b9e55dcbedc14fc9218d5c37f8b52027c9c6da392b78b7080e99676a6fedd1fad882750303282cd4dd6e14824b72ab4d7
SSDEEP 12288:jaGGhkbXB+3pgGyS0VTBG//sop9bw/W1wR/kjy6FtgQAdJsg0HjoMWx:uG/bXBIAnQ/tbw/2Mkjy6Fr7g0ox
TLSH
T12065F00373F4456DF8F32A3158B15722AA3FBCB1DA62DB6E2780055D2F352908991B7B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

31241

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

BraveUpdate_unsigned.pdb

advapi32

RegOpenKeyExW

kernel32

SizeofResource HeapFree GetCommandLineW GetModuleFileNameW InitializeCriticalSectionAndSpinCount HeapSize GetLastError GetFileAttributesExW LockResource HeapReAlloc RaiseException FindResourceExW LoadResource FindResourceW HeapAlloc DecodePointer HeapDestroy GetProcAddress DeleteCriticalSection GetProcessHeap GetModuleHandleW FreeLibrary LoadLibraryExW CloseHandle CreateFileW SetFilePointerEx GetConsoleMode GetConsoleOutputCP FlushFileBuffers GetStringTypeW SetStdHandle IsDebuggerPresent OutputDebugStringW EnterCriticalSection LeaveCriticalSection ReleaseSRWLockExclusive AcquireSRWLockExclusive WakeAllConditionVariable SleepConditionVariableSRW UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent GetStartupInfoW QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead SetLastError RtlUnwind TlsAlloc TlsGetValue TlsSetValue TlsFree EncodePointer ExitProcess GetModuleHandleExW GetStdHandle WriteFile FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo GetCommandLineA MultiByteToWideChar WideCharToMultiByte GetEnvironmentStringsW FreeEnvironmentStringsW LCMapStringW GetFileType WriteConsoleW

shell32

SHGetFolderPathW

user32

CharLowerBuffW

shlwapi

SHQueryValueExW PathAppendW PathRemoveFileSpecW

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-04_ffb8ecfd7b2cfbabb10decd0687ca8c3_amadey_elex_play

advapi32

kernel32

shell32

user32

shlwapi

generic