2026-08-06_69389bcb9640f01566388f3e63f0d490_elex_stop

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-06_69389bcb9640f01566388f3e63f0d490_elex_stop
Size 136KB
Sample260806-l4eyeahm8x
SHA256 3fc7668b469ca77a1412918a87a71819595c71422f4892af5e72eaf7132dfb41
MD5 69389bcb9640f01566388f3e63f0d490
SHA1 5cb1ac04d3dd0aca33dfc81183dc3cb57ad9e0d3
SHA512 a1433e16b810606ca103701d2d00909715b5b910f9d9d3e184535a31d17aad497ec05ccc73c1cdaef2586b2e872604f641f1fb3eefec40892297971d7cb6fab4
SSDEEP 1536:jdsziRZuH7yaFb0fkbv5P8eVBxO+kxDY40yXcVjTq/DxyZ:j9wHRFofkjzlO+kZvHMVjsAZ
TLSH
T156D3F501B64140A0E3590771058AFAE54A699F3D07E5E2CFF3787E36A9722E35A7318F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

aspackv2

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-06_69389bcb9640f01566388f3e63f0d490_elex_stop

File Explorer

2026-08-06_69389bcb9640f01566388f3e63f0d490_elex_stop

.exe 136KB

2026-08-06_69389bcb9640f01566388f3e63f0d490_elex_stop

SHA256 3fc7668b469ca77a1412918a87a71819595c71422f4892af5e72eaf7132dfb41
MD5 69389bcb9640f01566388f3e63f0d490
SHA1 5cb1ac04d3dd0aca33dfc81183dc3cb57ad9e0d3
SHA512 a1433e16b810606ca103701d2d00909715b5b910f9d9d3e184535a31d17aad497ec05ccc73c1cdaef2586b2e872604f641f1fb3eefec40892297971d7cb6fab4
SSDEEP 1536:jdsziRZuH7yaFb0fkbv5P8eVBxO+kxDY40yXcVjTq/DxyZ:j9wHRFofkjzlO+kZvHMVjsAZ
TLSH
T156D3F501B64140A0E3590771058AFAE54A699F3D07E5E2CFF3787E36A9722E35A7318F
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

ASPack v2.12-2.42

Detects executables packed with ASPack v2.12-2.42

aspackv2
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

516097

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

Name

.text

Size

63KB

Virtual Size

124KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

12KB

Virtual Size

36KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

2KB

Virtual Size

276KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

2KB

Virtual Size

52KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

4KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

JHDFRWG

Size

51KB

Virtual Size

52KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.adata

Size

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-06_69389bcb9640f01566388f3e63f0d490_elex_stop

generic