2026-09-26_5c1b314843bfb6990125e2bf550a6375_elex_floxif_stop

Sharing

Copy URL Twitter E-mail

General

Target
2026-09-26_5c1b314843bfb6990125e2bf550a6375_elex_floxif_stop
Size 6.6MB
Sample260926-13877aseqa
SHA256 f83be74960e8c79c916b18bc9f325a0c14238b44f1d7e0029f7b41d17efa26e3
MD5 5c1b314843bfb6990125e2bf550a6375
SHA1 6b6ea858272ed4aecaf25685d0ef60f8b5355288
SHA512 6396b6e4a79840138c0fb293d4882c5d2e6522ea7d4e21ee2e622d924046e3a6c3594c712bfa777698c65d71e3acc97736114f3ffc0be844d9d3b74733e63db5
SSDEEP 98304:SUUouCsJ/v8LEugy88tBHFDheo1J0O18mV:ZQFNELEugy88tBjwO1t
TLSH
T1E0666C35FBCA80B4C99319F0106B726F82B05B1487781AD3EFB43E18FA66AF1557524B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-09-26_5c1b314843bfb6990125e2bf550a6375_elex_floxif_stop

File Explorer

2026-09-26_5c1b314843bfb6990125e2bf550a6375_elex_floxif_stop

.exe 6.6MB

2026-09-26_5c1b314843bfb6990125e2bf550a6375_elex_floxif_stop

IMPHASH e18ea1bcfb1144619c7175768d2cb90b
SHA256 f83be74960e8c79c916b18bc9f325a0c14238b44f1d7e0029f7b41d17efa26e3
MD5 5c1b314843bfb6990125e2bf550a6375
SHA1 6b6ea858272ed4aecaf25685d0ef60f8b5355288
SHA512 6396b6e4a79840138c0fb293d4882c5d2e6522ea7d4e21ee2e622d924046e3a6c3594c712bfa777698c65d71e3acc97736114f3ffc0be844d9d3b74733e63db5
SSDEEP 98304:SUUouCsJ/v8LEugy88tBHFDheo1J0O18mV:ZQFNELEugy88tBjwO1t
TLSH
T1E0666C35FBCA80B4C99319F0106B726F82B05B1487781AD3EFB43E18FA66AF1557524B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

5873622

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

c:\nida\NidaGameSource_auto\client\Release\Nida.pdb

wsock32

getsockopt setsockopt socket closesocket select WSAStartup inet_ntoa WSACleanup __WSAFDIsSet ioctlsocket htons connect send recv WSAGetLastError shutdown

winmm

timeGetTime

imm32

ImmReleaseContext ImmAssociateContext ImmGetIMEFileNameA ImmGetOpenStatus ImmGetConversionStatus ImmIsIME ImmSetOpenStatus ImmAssociateContextEx ImmNotifyIME ImmGetCandidateListA ImmSetCompositionStringA ImmGetCompositionStringA ImmGetContext

d3d9

Direct3DCreate9

d3dxof

DirectXFileCreate

dinput8

DirectInput8Create

dsound

ord1

version

GetFileVersionInfoA GetFileVersionInfoSizeA VerQueryValueA

kernel32

Process32Next Process32First CreateToolhelp32Snapshot Module32Next Module32First GetCurrentProcessId GetPrivateProfileIntA CreateProcessA MoveFileA DeleteFileA Sleep GetPrivateProfileStringA Thread32Next Thread32First GetProcAddress LoadLibraryA FreeLibrary WaitForSingleObject CreateEventA CreateDirectoryA MulDiv lstrlenA TerminateProcess OpenProcess CreateFileA GetFullPathNameA QueryPerformanceCounter QueryPerformanceFrequency MultiByteToWideChar WideCharToMultiByte GlobalUnlock GlobalLock GlobalAlloc HeapFree HeapAlloc GetProcessHeap CompareStringA GetSystemDirectoryA IsDBCSLeadByteEx GetLocaleInfoA GetVersionExW FileTimeToSystemTime SetEvent FindNextFileA FindFirstFileA ReadFile WriteFile SetFilePointer GetFileSize FreeConsole GetConsoleMode SetConsoleMode GetStdHandle HeapCreate SetConsoleCtrlHandler WriteConsoleA GetLastError GetCurrentProcess GetCurrentThreadId GetModuleFileNameA SetUnhandledExceptionFilter GetModuleHandleA CloseHandle SuspendThread SetThreadPriority CreateThread TerminateThread GetExitCodeThread GetTickCount GetSystemInfo IsProcessorFeaturePresent InterlockedIncrement InterlockedDecrement GetTempFileNameA GetTempPathA MapViewOfFile CreateFileMappingA CreateFileW UnmapViewOfFile LockResource LoadResource SizeofResource FindResourceA FindResourceW InterlockedExchange InterlockedCompareExchange VirtualFree VirtualAlloc lstrcmpiA SetEnvironmentVariableA DeleteFileW MoveFileW GetTempFileNameW IsBadWritePtr GlobalMemoryStatus SetEndOfFile IsValidCodePage GetOEMCP GetACP GetCPInfo GetTimeZoneInformation InitializeCriticalSectionAndSpinCount FatalAppExitA HeapSize GetCurrentThread SetLastError TlsFree TlsSetValue TlsAlloc TlsGetValue HeapReAlloc GetLocalTime GetStartupInfoA GetCommandLineA ExitThread FileTimeToLocalFileTime FindClose ExitProcess GetModuleHandleW GetSystemTimeAsFileTime RaiseException IsDebuggerPresent UnhandledExceptionFilter RtlUnwind HeapDestroy GetVersionExA OutputDebugStringA DeleteCriticalSection EnterCriticalSection LeaveCriticalSection InitializeCriticalSection IsDBCSLeadByte FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW GetFileType ResumeThread SetHandleCount GetConsoleCP FlushFileBuffers GetTimeFormatA GetDateFormatA GetUserDefaultLCID EnumSystemLocalesA IsValidLocale GetStringTypeA GetStringTypeW LCMapStringA LCMapStringW VirtualQuery GetFileAttributesA GetLocaleInfoW SetStdHandle GetConsoleOutputCP WriteConsoleW CompareStringW AllocConsole FreeResource

user32

RegisterClassA CreateWindowExA SetWindowLongA AdjustWindowRect MsgWaitForMultipleObjects ShowWindow UpdateWindow SetRect SetWindowPos ClientToScreen MoveWindow MessageBoxA GetClassNameA PostQuitMessage LoadCursorA GetKeyboardLayout IsClipboardFormatAvailable GetClipboardData OpenClipboard EmptyClipboard SetClipboardData CloseClipboard wsprintfA GetWindowTextA EnumWindows GetWindowThreadProcessId GetCursorPos GetClientRect ScreenToClient LoadIconA GetDC UnhookWindowsHookEx SetWindowsHookExA PeekMessageA TranslateMessage DispatchMessageA DefWindowProcA SetCursor ShowCursor

gdi32

DeleteObject DeleteDC CreateCompatibleDC CreateDIBSection SetMapMode GetDeviceCaps CreateFontA SelectObject SetTextColor PatBlt SetTextAlign GetPixel GetTextExtentPoint32A CreateFontIndirectA CreateFontIndirectW MoveToEx ExtTextOutW GetObjectA GetObjectW GetTextMetricsA GetGlyphOutlineA GetCharacterPlacementA GetCharacterPlacementW SetBkMode GetFontLanguageInfo ExtTextOutA SetBkColor GetTextMetricsW

advapi32

RegOpenKeyA RegSetValueExA RegOpenKeyExA RegQueryValueExA RegCloseKey

shell32

ShellExecuteA

ole32

CoCreateInstance CoInitialize

generic

count=6, id=150, version=20413,

count=175, id=131, productName=VS2008 SP1 build 30729, version=30729,

count=2, id=109, productName=VS2005 build 50727, version=50727,

count=5, productName=Unmarked objects (old),

count=4, id=25, version=9210,

count=2, id=28, version=9178,

count=2, id=19, version=9049,

count=3, id=95, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,

count=12, id=95, version=2067,

count=6, id=18, version=8444,

count=146, id=96, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,

count=2, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,

count=21, id=123, productName=VS2005 build 50727, version=50727,

count=271, id=1, productName=Unmarked objects,

count=60, id=149, productName=VS2008 SP1 build 30729, version=30729,

count=341, id=132, productName=VS2008 SP1 build 30729, version=30729,

count=1, id=148, productName=VS2008 build 21022, version=21022,

count=1, id=145, productName=VS2008 SP1 build 30729, version=30729,