2026-08-16_55f291b501bb52574302a808c15a11a3_elex_maze

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-16_55f291b501bb52574302a808c15a11a3_elex_maze
Size 326KB
Sample260816-rsvsdazzbv
SHA256 9dba9e508ce52da37b3a603d126e0c76da571d673c40017fef446d3f7c7d2085
MD5 55f291b501bb52574302a808c15a11a3
SHA1 d1fa2d7d2ab17ffd5de29a445bbf0e0af56331fa
SHA512 189a4887849c2777e34d1147a08dc9af1f301a53bc65a4fe829149e948df9eede36a4f4a0e6a41453627f8ddfba9430b69d55bfd522d491afa176c12bca99a24
SSDEEP 6144:Z7CZErtdArPhfreSSxA1wzFszDtrfvruGhmFIFuqzRAu+0xdBr4v+jSvW9ykZn6p:Z7CZEz6PhjeSF22zDtr3ru5IHn6JXB
TLSH
T15B646CE1B5418420E4A35071C6BA8F379D6AB2267F1548F7B3CC1CAC96949E3763E70E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-16_55f291b501bb52574302a808c15a11a3_elex_maze

File Explorer

2026-08-16_55f291b501bb52574302a808c15a11a3_elex_maze

.exe 326KB

2026-08-16_55f291b501bb52574302a808c15a11a3_elex_maze

IMPHASH c58190e2c80d79914ab26e259c00c5fb
SHA256 9dba9e508ce52da37b3a603d126e0c76da571d673c40017fef446d3f7c7d2085
MD5 55f291b501bb52574302a808c15a11a3
SHA1 d1fa2d7d2ab17ffd5de29a445bbf0e0af56331fa
SHA512 189a4887849c2777e34d1147a08dc9af1f301a53bc65a4fe829149e948df9eede36a4f4a0e6a41453627f8ddfba9430b69d55bfd522d491afa176c12bca99a24
SSDEEP 6144:Z7CZErtdArPhfreSSxA1wzFszDtrfvruGhmFIFuqzRAu+0xdBr4v+jSvW9ykZn6p:Z7CZEz6PhjeSF22zDtr3ru5IHn6JXB
TLSH
T15B646CE1B5418420E4A35071C6BA8F379D6AB2267F1548F7B3CC1CAC96949E3763E70E
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

191572

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

D:\pginstaller.auto\postgres.windows\Release\pg_dump\pg_dump.pdb

zlib1

gzdopen gzopen inflateInit_ deflateInit_ gzerror gzclose gzeof gzgetc gzgets gzwrite gzread inflateEnd inflate deflateEnd deflate

libintl-8

libintl_ngettext libintl_gettext libintl_textdomain libintl_bindtextdomain

libpq

ord97 ord140 ord138 ord20 ord24 ord103 ord104 ord85 ord105 ord35 ord37 ord38 ord39 ord46 ord47 ord96 ord94 ord55 ord74 ord113 ord72 ord34 ord45 ord126 ord64 ord77 ord69 ord76 ord67 ord70 ord130 ord90 ord91 ord75 ord68 ord120 ord14 ord9 ord4 ord156 ord92 ord115 ord123 ord56 ord54 ord53 ord15 ord11 ord10 ord8 ord7 ord48 ord33 ord21 ord122 ord121 ord95

ws2_32

WSAGetLastError WSACleanup WSAStartup socket send select recv listen htons htonl getsockname connect closesocket bind accept __WSAFDIsSet

kernel32

DecodePointer GetSystemTimeAsFileTime GetCurrentProcessId QueryPerformanceCounter EncodePointer IsProcessorFeaturePresent IsDebuggerPresent SleepEx SetEnvironmentVariableA GetModuleHandleA GetProcAddress FindNextFileA FindFirstFileA FindClose SetConsoleMode WideCharToMultiByte MultiByteToWideChar MoveFileExA GetFileAttributesExA GetFileAttributesA CreateFileA RemoveDirectoryA CreateDirectoryA FormatMessageA DeviceIoControl GetCurrentDirectoryA CreateProcessA CreatePipe DuplicateHandle ReadFile WaitForSingleObject GetLastError GetCurrentProcess LocalFree LocalAlloc SetConsoleCtrlHandler TlsSetValue TlsGetValue TlsAlloc CloseHandle WaitForMultipleObjects LeaveCriticalSection EnterCriticalSection InitializeCriticalSection TerminateThread GetCurrentThreadId GetConsoleMode

advapi32

AddAccessAllowedAceEx GetAce AddAce GetAclInformation InitializeAcl GetLengthSid SetTokenInformation GetTokenInformation

msvcr120

_cexit _configthreadlocale __setusermatherr _initterm_e _initterm __initenv _fmode _commode ?terminate@@YAXXZ _getcwd __crtSetUnhandledExceptionFilter _lock _unlock _calloc_crt __dllonexit _onexit _invoke_watson _controlfp_s _except_handler4_common _strdup _write _fdopen _dup _mkdir _open _umask _unlink _exit strtoul free isdigit memset fclose feof fgetc fgets fopen fread fwrite _errno strerror __iob_func exit abort malloc memmove strchr strncmp strstr isupper isspace fflush sscanf _beginthreadex _endthreadex ferror _fseeki64 _ftelli64 strtol strspn _setmode strftime _localtime64 _mktime64 _time64 memcpy fputc getc strncpy _tempnam atoi puts realloc _pclose getenv isalpha sprintf strrchr _dclass islower toupper tolower _stat64i32 _fileno fputs _get_osfhandle strcspn _putenv setlocale _crt_debugger_hook __crtUnhandledException __crtTerminateProcess _XcptFilter _amsg_exit __getmainargs __set_app_type

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-16_55f291b501bb52574302a808c15a11a3_elex_maze

zlib1

libintl-8

libpq

ws2_32

kernel32

advapi32

msvcr120

generic