2026-08-19_c6e19cceaaf6922c10c866a2b7283b40_elex_stop

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-19_c6e19cceaaf6922c10c866a2b7283b40_elex_stop
Size 9.1MB
Sample260819-v7mxvsen7x
SHA256 b1a5e2279bcb4de638667ec2d705e2867ce3d432246642da1d3dc77d4baf93bc
MD5 c6e19cceaaf6922c10c866a2b7283b40
SHA1 f6b75d2936e7c0c351ad6757aefe2d3d6c6d5393
SHA512 0a45548794b0576f01ba0ef10215208351491de8004967df145ae7884500746e4bbbf70c1bbda653f29308cf24bb1044f3b30dc1d7781df9599736cebd1d7050
SSDEEP 98304:1ZkbYh7tHMv27ilzpRQpJ88MfsMzt9SkLWST:rdh9Mv2wbQPxgsMztRW
TLSH
T144A67D14AE4941F1D54622786B56F32F25336256C77C2AC3E6626E170B74AE22C3E3FC
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-19_c6e19cceaaf6922c10c866a2b7283b40_elex_stop

File Explorer

2026-08-19_c6e19cceaaf6922c10c866a2b7283b40_elex_stop

.exe 9.1MB

2026-08-19_c6e19cceaaf6922c10c866a2b7283b40_elex_stop

IMPHASH 7216ac6a4a8f937ec3b2eee8de244a9e
SHA256 b1a5e2279bcb4de638667ec2d705e2867ce3d432246642da1d3dc77d4baf93bc
MD5 c6e19cceaaf6922c10c866a2b7283b40
SHA1 f6b75d2936e7c0c351ad6757aefe2d3d6c6d5393
SHA512 0a45548794b0576f01ba0ef10215208351491de8004967df145ae7884500746e4bbbf70c1bbda653f29308cf24bb1044f3b30dc1d7781df9599736cebd1d7050
SSDEEP 98304:1ZkbYh7tHMv27ilzpRQpJ88MfsMzt9SkLWST:rdh9Mv2wbQPxgsMztRW
TLSH
T144A67D14AE4941F1D54622786B56F32F25336256C77C2AC3E6626E170B74AE22C3E3FC
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

10400285

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

Name

.text

Size

6.5MB

Virtual Size

6.5MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

1.1MB

Virtual Size

1.1MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

1.2MB

Virtual Size

2.1MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

35KB

Virtual Size

34KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.data1

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.cabala0

Size

53KB

Virtual Size

52KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.cabala1

Size

100KB

Virtual Size

100KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

5KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

generic

count=6, id=150, version=20413,

count=56, id=149, productName=VS2008 SP1 build 30729, version=30729,

count=185, id=131, productName=VS2008 SP1 build 30729, version=30729,

count=25, id=10, productName=VS98 (6.0) SP6 build 8804, version=9782,

count=1, id=11, productName=VS98 (6.0) SP6 build 8804, version=9782,

count=1, id=48, version=9044,

count=8, id=137, version=30729,

count=3, id=109, productName=VS2005 build 50727, version=50727,

count=62, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,

count=67, id=29, version=9178,

count=1, id=18, version=8444,

count=8, productName=Unmarked objects (old),

count=2, id=25, version=9210,

count=2, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,

count=3, id=28, version=9178,

count=1, id=110, productName=VS2005 build 50727, version=50727,

count=31, id=123, productName=VS2005 build 50727, version=50727,

count=373, id=1, productName=Unmarked objects,

count=1509, id=132, productName=VS2008 SP1 build 30729, version=30729,

count=1, id=148, productName=VS2008 build 21022, version=21022,

count=1, id=151,

count=1, id=145, productName=VS2008 SP1 build 30729, version=30729,

2026-08-19_c6e19cceaaf6922c10c866a2b7283b40_elex_stop

kernel32

advapi32

comctl32

d3d8

dinput8

gdi32

ijl15

imm32

libexpat

mss32

odbc32

ole32

oleaut32

shell32

user32

version

wininet

winmm

ws2_32

generic