2026-08-19_55d4d4353b9b6d3e13fa029a6556f6ab_elex_floxif_maze

General

Target
2026-08-19_55d4d4353b9b6d3e13fa029a6556f6ab_elex_floxif_maze
Size 743KB
Sample260819-ydma1ssalg
SHA256 10b854c2b9f2f867766aef434b7f3c62eb1d9348590e921bc3f54b05da683797
MD5 55d4d4353b9b6d3e13fa029a6556f6ab
SHA1 fc6ec093d855655e5da8af20c19d4ba7266c9c1f
SHA512 afa1e718dd82bfa1b444bfa4e38e8eade349c735921501640a3fbe3e4b04d2ef3f20a29045ebb49d1e5a752e21f760ad68cb54055fcb54de5ce9bd82643a1eb2
SSDEEP 12288:V8czQWMuhKyHQucsY2iNc/A5G8JAIsurwDkxjSDkjHdlBjvrEH7z:V8cz6uh5wucs9iNEA5G8hsu0QjJ1rEHX
TLSH
T142F48D70B520937AD8A94171BBED4BB6BCBD613D971AD5E3D3810AA50C3C4E1A87D20F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-19_55d4d4353b9b6d3e13fa029a6556f6ab_elex_floxif_maze

File Explorer

2026-08-19_55d4d4353b9b6d3e13fa029a6556f6ab_elex_floxif_maze

.exe 743KB

2026-08-19_55d4d4353b9b6d3e13fa029a6556f6ab_elex_floxif_maze

IMPHASH 43d29f2ab7d1dff87ef96c0bb04e0c45
SHA256 10b854c2b9f2f867766aef434b7f3c62eb1d9348590e921bc3f54b05da683797
MD5 55d4d4353b9b6d3e13fa029a6556f6ab
SHA1 fc6ec093d855655e5da8af20c19d4ba7266c9c1f
SHA512 afa1e718dd82bfa1b444bfa4e38e8eade349c735921501640a3fbe3e4b04d2ef3f20a29045ebb49d1e5a752e21f760ad68cb54055fcb54de5ce9bd82643a1eb2
SSDEEP 12288:V8czQWMuhKyHQucsY2iNc/A5G8JAIsurwDkxjSDkjHdlBjvrEH7z:V8cz6uh5wucs9iNEA5G8hsu0QjJ1rEHX
TLSH
T142F48D70B520937AD8A94171BBED4BB6BCBD613D971AD5E3D3810AA50C3C4E1A87D20F
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

523279

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

ws2_32

gethostname __WSAFDIsSet recvfrom sendto getaddrinfo freeaddrinfo WSASetLastError getpeername getsockopt ntohs getsockname inet_addr WSAGetLastError WSACleanup WSAStartup socket setsockopt send select recv listen htons htonl ioctlsocket connect closesocket bind accept

wldap32

ord22 ord211 ord143 ord60 ord50 ord26 ord30 ord32 ord35 ord79 ord200 ord33 ord301 ord27 ord41 ord46

kernel32

DecodePointer GetSystemTimeAsFileTime GetCurrentThreadId GetCurrentProcessId QueryPerformanceCounter EncodePointer IsProcessorFeaturePresent IsDebuggerPresent FormatMessageA ExpandEnvironmentStringsA LoadLibraryA FreeLibrary GetFileType WaitForMultipleObjects PeekNamedPipe ReadFile SetLastError GetLastError SleepEx SetConsoleTitleA CreateEventA WaitForSingleObject ResetEvent SetEvent DeleteCriticalSection LeaveCriticalSection EnterCriticalSection InitializeCriticalSection Sleep GetTickCount SetConsoleCtrlHandler SetConsoleTextAttribute GetStdHandle GetProcAddress CloseHandle

msvcr120

isprint isupper islower isgraph _strdup _strnicmp _close _fileno _open _read _except_handler4_common _crt_debugger_hook __crtUnhandledException __crtTerminateProcess _except1 _XcptFilter _amsg_exit __getmainargs __set_app_type _cexit _configthreadlocale __setusermatherr _initterm_e _initterm __initenv _fmode _commode ?terminate@@YAXXZ __crtSetUnhandledExceptionFilter _lock _unlock _calloc_crt __dllonexit _onexit _invoke_watson _controlfp_s _mkdir sprintf _stricmp memcpy memset printf puts srand _sleep _localtime64 _time64 __iob_func fclose fopen fprintf exit _exit calloc free malloc realloc fgets putc sscanf memmove strtok strncmp strstr atoi strtoul strncpy atol qsort rand strchr atof fputc fread fwrite _beginthreadex feof fputs vsprintf system longjmp isalpha isdigit isspace isalnum tolower _setjmp3 fseek strtol isxdigit strrchr _strtoi64 _errno memchr _fstat64 _lseeki64 fflush getenv strerror __sys_nerr _gmtime64 _stat64

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-19_55d4d4353b9b6d3e13fa029a6556f6ab_elex_floxif_maze

ws2_32

wldap32

kernel32

msvcr120

generic