2026-08-09_aa557a530ae1f6914d2d76db275c8cee_elex_floxif_mafia

General

Target
2026-08-09_aa557a530ae1f6914d2d76db275c8cee_elex_floxif_mafia
Size 716KB
Sample260809-frhwms1cja
SHA256 9387994e4be7c7834fdd41a0598861d058b818b6dfb8b327b7de5948407a46a0
MD5 aa557a530ae1f6914d2d76db275c8cee
SHA1 d2c9a250a1d2f70d7b90c3ccb854bcb50bbdf78d
SHA512 b7ec1e2d437ac37d3361da7b4a009f9083707739dad165e27b842e7201b5fcf7cdf38533ccf22639db1a2605aa4f12f9c42260419725641d719791402a0a7159
SSDEEP 12288:R+LonB/33tx2+c/oq50Lwabhl5NQiP8HCDJGQqANUCwj0+64nIiUvpKaL83sd2+8:R+2B/39FbLqANULj0N45U8p3sd2+Wjik
TLSH
T1CBF49E227782C3BAD5B220B05D6D979914BBF5740F2619C7E3D40B6E4F289C35E3622B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-09_aa557a530ae1f6914d2d76db275c8cee_elex_floxif_mafia

File Explorer

2026-08-09_aa557a530ae1f6914d2d76db275c8cee_elex_floxif_mafia

.exe 716KB

2026-08-09_aa557a530ae1f6914d2d76db275c8cee_elex_floxif_mafia

IMPHASH ed42db10b3c1bb69db439b51470b9726
SHA256 9387994e4be7c7834fdd41a0598861d058b818b6dfb8b327b7de5948407a46a0
MD5 aa557a530ae1f6914d2d76db275c8cee
SHA1 d2c9a250a1d2f70d7b90c3ccb854bcb50bbdf78d
SHA512 b7ec1e2d437ac37d3361da7b4a009f9083707739dad165e27b842e7201b5fcf7cdf38533ccf22639db1a2605aa4f12f9c42260419725641d719791402a0a7159
SSDEEP 12288:R+LonB/33tx2+c/oq50Lwabhl5NQiP8HCDJGQqANUCwj0+64nIiUvpKaL83sd2+8:R+2B/39FbLqANULj0N45U8p3sd2+Wjik
TLSH
T1CBF49E227782C3BAD5B220B05D6D979914BBF5740F2619C7E3D40B6E4F289C35E3622B
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

313607

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\Develop\My\ssr2\Release\rxrepl.pdb

kernel32

FindFirstFileW FindNextFileW FindClose WideCharToMultiByte MultiByteToWideChar ReadFile GetLastError WriteFile CreateFileW SetFilePointer GetStdHandle CloseHandle SetLastError FormatMessageW LocalFree GetModuleHandleW InterlockedIncrement InterlockedDecrement InterlockedCompareExchange InterlockedExchange GetStringTypeW Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection EncodePointer DecodePointer DeleteFileW DeviceIoControl GetFileAttributesW CreateDirectoryW GetProcAddress GetModuleHandleA AreFileApisANSI FormatMessageA HeapFree MoveFileW GetCommandLineW HeapSetInformation HeapAlloc HeapReAlloc RtlUnwind LCMapStringW GetCPInfo RaiseException ExitProcess TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapCreate IsProcessorFeaturePresent TlsAlloc TlsGetValue TlsSetValue TlsFree GetCurrentThreadId GetModuleFileNameW GetLocaleInfoW HeapSize GetACP GetOEMCP IsValidCodePage FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType GetStartupInfoW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetUserDefaultLCID GetLocaleInfoA EnumSystemLocalesA IsValidLocale GetConsoleCP GetConsoleMode FlushFileBuffers LoadLibraryW WriteConsoleW SetStdHandle GetTimeFormatA GetDateFormatA CompareStringW GetTimeZoneInformation SetEnvironmentVariableA

user32

LoadStringW

Name

.text

Size

486KB

Virtual Size

485KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

90KB

Virtual Size

89KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

21KB

Virtual Size

30KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

9B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

512B

Virtual Size

436B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

41KB

Virtual Size

40KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-09_aa557a530ae1f6914d2d76db275c8cee_elex_floxif_mafia

kernel32

user32

generic