2026-08-08_0143f6c45817300be746212d8efd0435_elex_emotet_floxif_stop

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-08_0143f6c45817300be746212d8efd0435_elex_emotet_floxif_stop
Size 582KB
Sample260808-evyktszfne
SHA256 16f7639b2b91fe86d8eccc1fc18bf418334d6458300c7bac61f97a7fb6f5b419
MD5 0143f6c45817300be746212d8efd0435
SHA1 bdcaafbd75a8fcf41d033b857c3c6ff1d7fe73ca
SHA512 6360715343a7f139d193dd52b2622d9ad285950bb1df54cea0701b3b8838216378e0cde64dcd6f0ae6d992fa074f04734d9b851929b19b6ed0434e2340d68b6c
SSDEEP 6144:eiRmpX1VOh3mzi/YEM8MZXisI54Zq5KUhn7XfPreXCenaX7memnTaKaLLuz2Ln+4:wO0zyMZtDZrU5mBjvrEH7N7y4
TLSH
T1CFC40986725A4FF4EEBBC33760491D1F15023DAD911254BA6FCEBA298DF9201132E736
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

Malware Config

Signatures

Codesign digest Mismatch 1 IoCs

File was altered after it was signed.

resource
2026-08-08_0143f6c45817300be746212d8efd0435_elex_emotet_floxif_stop

File Explorer

2026-08-08_0143f6c45817300be746212d8efd0435_elex_emotet_floxif_stop

.exe 582KB

2026-08-08_0143f6c45817300be746212d8efd0435_elex_emotet_floxif_stop

IMPHASH d214be6c6a14f864fc014134a04d5aff
SHA256 16f7639b2b91fe86d8eccc1fc18bf418334d6458300c7bac61f97a7fb6f5b419
MD5 0143f6c45817300be746212d8efd0435
SHA1 bdcaafbd75a8fcf41d033b857c3c6ff1d7fe73ca
SHA512 6360715343a7f139d193dd52b2622d9ad285950bb1df54cea0701b3b8838216378e0cde64dcd6f0ae6d992fa074f04734d9b851929b19b6ed0434e2340d68b6c
SSDEEP 6144:eiRmpX1VOh3mzi/YEM8MZXisI54Zq5KUhn7XfPreXCenaX7memnTaKaLLuz2Ln+4:wO0zyMZtDZrU5mBjvrEH7N7y4
TLSH
T1CFC40986725A4FF4EEBBC33760491D1F15023DAD911254BA6FCEBA298DF9201132E736
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Codesign digest Mismatch

File was altered after it was signed.

PE Signature issue

Digest

c2:61:14:9c:ec:77:9a:0a:1a:c4:b6:05:43:c2:dd:ac:99:e1:e4:e6

Digest Algorithm

sha1

PE Digests Matches

Not matched

Trusted

Not trusted

Signing Certificate

CN=Fuji Xerox Co.\, Ltd.,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Solution Service Development Group,O=Fuji Xerox Co.\, Ltd.,L=Yokohama,ST=Kanagawa,C=JP

Chains

Jun 18, 2013

CN=Fuji Xerox Co.\, Ltd.,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Solution Service Development Group,O=Fuji Xerox Co.\, Ltd.,L=Yokohama,ST=Kanagawa,C=JP

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Serial Number

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 21, 2012 - Dec 30, 2020

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Serial Number

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 18, 2012 - Dec 29, 2020

Subject

CN=Fuji Xerox Co.\, Ltd.,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Solution Service Development Group,O=Fuji Xerox Co.\, Ltd.,L=Yokohama,ST=Kanagawa,C=JP

Serial Number

29:66:2a:74:5c:40:15:70:38:f2:78:9d:69:05:e9:c3

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Aug 21, 2012 - Aug 23, 2013

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Serial Number

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 8, 2010 - Feb 7, 2020

Minor OS version

Major OS version

Entry point

83640

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetErrorMode RtlUnwind HeapAlloc HeapFree HeapReAlloc VirtualAlloc GetCommandLineA GetProcessHeap GetStartupInfoA RaiseException ExitProcess HeapSize TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent VirtualFree HeapCreate GetStdHandle GetACP IsValidCodePage Sleep FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType QueryPerformanceCounter GetTickCount GetSystemTimeAsFileTime LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetConsoleCP GetConsoleMode SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW FlushFileBuffers ReadFile WritePrivateProfileStringA GetThreadLocale GetOEMCP GetCPInfo InterlockedIncrement TlsFree DeleteCriticalSection LocalReAlloc TlsSetValue TlsAlloc InitializeCriticalSection GlobalHandle GlobalReAlloc EnterCriticalSection TlsGetValue LeaveCriticalSection LocalAlloc GlobalFlags InterlockedDecrement GetModuleFileNameW GetCurrentProcessId GetCurrentThread ConvertDefaultLocale EnumResourceLanguagesA GetLocaleInfoA lstrcmpA GlobalAlloc FormatMessageA LocalFree MulDiv GetCurrentThreadId GlobalGetAtomNameA GlobalAddAtomA GlobalFindAtomA GlobalDeleteAtom FreeLibrary lstrcmpW SetLastError LoadLibraryA GlobalLock GlobalUnlock GlobalFree FreeResource GetVersionExA GetUserDefaultLCID CreateProcessA WaitForSingleObject GetExitCodeProcess CreateDirectoryA CreateFileA SetFilePointer WriteFile CloseHandle GetModuleFileNameA GetTempPathA GetLocalTime GetPrivateProfileStringA FindFirstFileA FindClose FindResourceA LoadResource LockResource SizeofResource GetFileAttributesA GetModuleHandleA GetProcAddress GetCurrentProcess CompareStringA GetVersion GetLastError WideCharToMultiByte MultiByteToWideChar InterlockedExchange HeapDestroy lstrlenA

user32

LoadCursorA GetSysColorBrush EndPaint BeginPaint ClientToScreen GrayStringA DrawTextExA DrawTextA TabbedTextOutA SetCursor GetMessageA GetCursorPos ValidateRect GetWindowThreadProcessId PostQuitMessage ShowWindow SetWindowTextA IsDialogMessageA SetMenuItemBitmaps GetMenuCheckMarkDimensions LoadBitmapA ModifyMenuA GetMenuState EnableMenuItem CheckMenuItem RegisterWindowMessageA LoadIconA WinHelpA GetCapture CallNextHookEx GetClassLongA GetClassNameA SetPropA GetPropA RemovePropA GetFocus SetFocus GetWindowTextA GetForegroundWindow GetLastActivePopup GetTopWindow UnhookWindowsHookEx GetMessageTime GetMessagePos MapWindowPoints GetKeyState IsWindowVisible GetMenu PostMessageA GetSubMenu GetMenuItemID GetMenuItemCount MessageBoxA CreateWindowExA GetClassInfoExA GetClassInfoA RegisterClassA GetSysColor UpdateWindow SetForegroundWindow EnableWindow SendMessageA AdjustWindowRectEx PtInRect GetDlgCtrlID DefWindowProcA CallWindowProcA SetWindowLongA SetWindowPos UnregisterClassA DestroyMenu SendDlgItemMessageA DispatchMessageA TranslateMessage PeekMessageA EndDialog GetNextDlgTabItem GetParent IsWindowEnabled GetDlgItem GetWindowLongA IsWindow DestroyWindow CreateDialogIndirectParamA GetSystemMetrics SetActiveWindow GetActiveWindow GetDesktopWindow CopyRect GetClientRect SystemParametersInfoA IsIconic GetWindowPlacement GetWindowRect GetWindow ReleaseDC GetDC SetWindowsHookExA

gdi32

ScaleViewportExtEx SetWindowExtEx ScaleWindowExtEx DeleteDC GetStockObject SetViewportExtEx OffsetViewportOrgEx SetViewportOrgEx SelectObject Escape ExtTextOutA TextOutA RectVisible PtVisible DeleteObject SetMapMode RestoreDC SaveDC GetDeviceCaps CreateBitmap GetObjectA SetBkColor SetTextColor GetClipBox

winspool.drv

ClosePrinter DocumentPropertiesA OpenPrinterA

advapi32

RegSetValueExA RegCreateKeyExA RegQueryValueA RegEnumKeyA RegDeleteKeyA RegOpenKeyA RegQueryValueExA RegOpenKeyExA RegCloseKey

shell32

SHGetSpecialFolderPathA ShellExecuteExA

shlwapi

PathFindFileNameA PathFindExtensionA

ole32

CoInitialize CoCreateInstance CoUninitialize

oleaut32

VariantClear VariantChangeType VariantInit

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-08_0143f6c45817300be746212d8efd0435_elex_emotet_floxif_stop

PE Signature issue

kernel32

user32

gdi32

winspool.drv

advapi32

shell32

shlwapi

ole32

oleaut32

generic