2026-09-23_5f7acde6121dc26c774d8a6a3a5e6d64_elex

Sharing

Copy URL Twitter E-mail

General

Target
2026-09-23_5f7acde6121dc26c774d8a6a3a5e6d64_elex
Size 2.6MB
Sample260924-jqthjaws2n
SHA256 297fdd2d8445b1606b97bbdff267e4c856330fe5e911dc30bd5b9785ffbff559
MD5 5f7acde6121dc26c774d8a6a3a5e6d64
SHA1 9fb6a8047902db8ddf9734802e8928722dc6e8d3
SHA512 99f753982e815b475dddd59ee91f69cefa79d41f0b803ba7b9ba7f13c5cb51d45270bbb67a653620f4f059549d8306fe69ad0e06c440252eb1addd6a3c5b9697
SSDEEP 24576:pLgITLfQmMNUUIyFaYmYoxSCTkMtbqxWdNEbrYIZ7v0wF6fvMFNx6cgAEjnPqxL7:eITEmpUnMG0wFEvMfxIAUnPqxwFbcl3x
TLSH
T194C52B135A8B0D75DDD27BB4A1CB633EA734ED30CA2A8B7FB608C43959532C56C1A742
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-09-23_5f7acde6121dc26c774d8a6a3a5e6d64_elex

File Explorer

2026-09-23_5f7acde6121dc26c774d8a6a3a5e6d64_elex

.exe 2.6MB

2026-09-23_5f7acde6121dc26c774d8a6a3a5e6d64_elex

IMPHASH a93cea5329220fb90674a1f0bde2cd0e
SHA256 297fdd2d8445b1606b97bbdff267e4c856330fe5e911dc30bd5b9785ffbff559
MD5 5f7acde6121dc26c774d8a6a3a5e6d64
SHA1 9fb6a8047902db8ddf9734802e8928722dc6e8d3
SHA512 99f753982e815b475dddd59ee91f69cefa79d41f0b803ba7b9ba7f13c5cb51d45270bbb67a653620f4f059549d8306fe69ad0e06c440252eb1addd6a3c5b9697
SSDEEP 24576:pLgITLfQmMNUUIyFaYmYoxSCTkMtbqxWdNEbrYIZ7v0wF6fvMFNx6cgAEjnPqxL7:eITEmpUnMG0wFEvMfxIAUnPqxwFbcl3x
TLSH
T194C52B135A8B0D75DDD27BB4A1CB633EA734ED30CA2A8B7FB608C43959532C56C1A742
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

5280

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CloseHandle CreateSemaphoreW CreateThread DeleteCriticalSection EnterCriticalSection FreeConsole FreeLibrary GetCurrentProcess GetCurrentProcessId GetCurrentProcessorNumber GetCurrentThreadId GetLastError GetModuleHandleA GetModuleHandleW GetProcAddress GetStartupInfoA GetSystemTimeAsFileTime GetTickCount InitializeCriticalSection IsDBCSLeadByteEx LeaveCriticalSection LoadLibraryA MultiByteToWideChar QueryPerformanceCounter ReleaseSemaphore SetLastError SetUnhandledExceptionFilter Sleep TerminateProcess TlsAlloc TlsFree TlsGetValue TlsSetValue UnhandledExceptionFilter VirtualProtect VirtualQuery WaitForSingleObject WideCharToMultiByte

msvcrt

___mb_cur_max_func __doserrno __getmainargs __initenv __lconv_init __p__acmdln __p__fmode __pioinfo __set_app_type __setusermatherr _amsg_exit _cexit _errno _fdopen _filelengthi64 _fileno _fileno _fstat64 _initterm _iob _lseeki64 _onexit _read _strnicmp _write _write abort atoi calloc exit fclose fflush fgetpos fopen fprintf fputc fputs fread free fsetpos fwrite getc getwc isspace iswctype localeconv malloc memchr memcmp memcpy memmove memset putc putwc realloc setlocale setvbuf signal sprintf strchr strcmp strcoll strerror strftime strlen strncmp strtoul strxfrm towlower towupper ungetc ungetwc vfprintf wcscoll wcsftime wcslen wcsxfrm

user32

AppendMenuA CreatePopupMenu GetDlgItem SendDlgItemMessageA

Name

.text

Size

806KB

Virtual Size

806KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

143KB

Virtual Size

142KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

82KB

Virtual Size

82KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

Size

242KB

Virtual Size

242KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

3KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.CRT

Size

512B

Virtual Size

52B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

/14

Size

512B

Virtual Size

272B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/29

Size

161KB

Virtual Size

160KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/41

Size

7KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/55

Size

26KB

Virtual Size

25KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/67

Size

512B

Virtual Size

56B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/80

Size

1024B

Virtual Size

580B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/91

Size

45KB

Virtual Size

44KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/102

Size

5KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-09-23_5f7acde6121dc26c774d8a6a3a5e6d64_elex

kernel32

msvcrt

user32

generic