2026-08-06_0f7c757a0f20396235d9e7aca85687dd_amadey_elex_hellokitty

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-06_0f7c757a0f20396235d9e7aca85687dd_amadey_elex_hellokitty
Size 84KB
Sample260806-ccbbga1elf
SHA256 5dfaf5a45805b94481a3043a748d21e1e363aa4333c24cf7df5acde697e78b86
MD5 0f7c757a0f20396235d9e7aca85687dd
SHA1 9eeddc76ca9cadaf101c41c5a2ccdcf74676745d
SHA512 0fe0dffbccd45c234b60aa51301940580907b27529fdbb34b3a9e6f5835a1cd7fa875b78e48913641458077c6941d10d262d059a0ed4088cdf2a87e3f727f807
SSDEEP 1536:c9WmS7oWghSj0A0mCcUFQ/v3hbSmWIar2topD1A0R+sWf9cdv0DxdvXT:iS7EhG0AdU4v3hbSmWnrLAYesv0Dxdvj
TLSH
T198836C10B6D2D471E5B25E3648B4DAB14E3DFD305E259EAB2384163E0F340D1AA3AD7B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-06_0f7c757a0f20396235d9e7aca85687dd_amadey_elex_hellokitty

File Explorer

2026-08-06_0f7c757a0f20396235d9e7aca85687dd_amadey_elex_hellokitty

.exe 84KB

2026-08-06_0f7c757a0f20396235d9e7aca85687dd_amadey_elex_hellokitty

IMPHASH 2c4baa5b369485c78c2ad77efd42b4fc
SHA256 5dfaf5a45805b94481a3043a748d21e1e363aa4333c24cf7df5acde697e78b86
MD5 0f7c757a0f20396235d9e7aca85687dd
SHA1 9eeddc76ca9cadaf101c41c5a2ccdcf74676745d
SHA512 0fe0dffbccd45c234b60aa51301940580907b27529fdbb34b3a9e6f5835a1cd7fa875b78e48913641458077c6941d10d262d059a0ed4088cdf2a87e3f727f807
SSDEEP 1536:c9WmS7oWghSj0A0mCcUFQ/v3hbSmWIar2topD1A0R+sWf9cdv0DxdvXT:iS7EhG0AdU4v3hbSmWnrLAYesv0Dxdvj
TLSH
T198836C10B6D2D471E5B25E3648B4DAB14E3DFD305E259EAB2384163E0F340D1AA3AD7B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

4743

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

aslib

TIME A1A3 MUNED

clibwin

ZPL_DUSERNAME IOTY EXEC VAXEXEC CLEAR_EXEC_ERREXIT GET_EXEC_ERREXIT zinitc

kernel32

GetModuleFileNameW WriteConsoleW CloseHandle CreateFileW SetFilePointerEx GetConsoleMode GetConsoleCP FlushFileBuffers QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW IsProcessorFeaturePresent GetModuleHandleW GetCurrentProcess TerminateProcess HeapReAlloc HeapSize RtlUnwind GetLastError SetLastError EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary GetProcAddress LoadLibraryExW RaiseException GetStdHandle WriteFile DecodePointer ExitProcess GetModuleHandleExW GetCommandLineA GetCommandLineW HeapAlloc HeapFree FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo MultiByteToWideChar WideCharToMultiByte GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW SetStdHandle GetFileType GetStringTypeW CompareStringW LCMapStringW GetProcessHeap

Name

.text

Size

47KB

Virtual Size

47KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

Z_TEXT

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

zinit_TE

Size

512B

Virtual Size

118B

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

string_T

Size

512B

Virtual Size

284B

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

22KB

Virtual Size

22KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

2KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

_ZDATA

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1024B

Virtual Size

768B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-06_0f7c757a0f20396235d9e7aca85687dd_amadey_elex_hellokitty

aslib

clibwin

kernel32

generic