2026-10-04_a5c99c64963ac3f6fc114e4d05748936_elex_floxif_maze

Sharing

Copy URL Twitter E-mail

General

Target
2026-10-04_a5c99c64963ac3f6fc114e4d05748936_elex_floxif_maze
Size 776KB
Sample261005-he9vpswblb
SHA256 6afd0382a2a63f4d9ec9773326ac775b9fb1b725b3eb3f1e236ba9216d7f7e8c
MD5 a5c99c64963ac3f6fc114e4d05748936
SHA1 b414f6b0c2b6b72cd7f5b369a89e24e404cb55e9
SHA512 51556c4f62bb4a2c5afecd618cea029560d8b91bff44d65810adb9325b19bd844c123140d1680c3c0fd49bd328518967fd582871181286cfd0906da6e19361e7
SSDEEP 24576:l8cz6uh5Uucin9iRYAVLP4su3Owpogb3rEH7m:icGuM8ir/aP
TLSH
T1C5F49D70B6209376D8A941757BED4BB6BCBD613D971AE5E3D3800AB50C2C4E1A87D20F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-10-04_a5c99c64963ac3f6fc114e4d05748936_elex_floxif_maze

File Explorer

2026-10-04_a5c99c64963ac3f6fc114e4d05748936_elex_floxif_maze

.exe 776KB

2026-10-04_a5c99c64963ac3f6fc114e4d05748936_elex_floxif_maze

IMPHASH 43d29f2ab7d1dff87ef96c0bb04e0c45
SHA256 6afd0382a2a63f4d9ec9773326ac775b9fb1b725b3eb3f1e236ba9216d7f7e8c
MD5 a5c99c64963ac3f6fc114e4d05748936
SHA1 b414f6b0c2b6b72cd7f5b369a89e24e404cb55e9
SHA512 51556c4f62bb4a2c5afecd618cea029560d8b91bff44d65810adb9325b19bd844c123140d1680c3c0fd49bd328518967fd582871181286cfd0906da6e19361e7
SSDEEP 24576:l8cz6uh5Uucin9iRYAVLP4su3Owpogb3rEH7m:icGuM8ir/aP
TLSH
T1C5F49D70B6209376D8A941757BED4BB6BCBD613D971AE5E3D3800AB50C2C4E1A87D20F
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

523279

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

ws2_32

gethostname __WSAFDIsSet recvfrom sendto getaddrinfo freeaddrinfo WSASetLastError getpeername getsockopt ntohs getsockname inet_addr WSAGetLastError WSACleanup WSAStartup socket setsockopt send select recv listen htons htonl ioctlsocket connect closesocket bind accept

wldap32

ord22 ord211 ord143 ord60 ord50 ord26 ord30 ord32 ord35 ord79 ord200 ord33 ord301 ord27 ord41 ord46

kernel32

DecodePointer GetSystemTimeAsFileTime GetCurrentThreadId GetCurrentProcessId QueryPerformanceCounter EncodePointer IsProcessorFeaturePresent IsDebuggerPresent FormatMessageA ExpandEnvironmentStringsA LoadLibraryA FreeLibrary GetFileType WaitForMultipleObjects PeekNamedPipe ReadFile SetLastError GetLastError SleepEx SetConsoleTitleA CreateEventA WaitForSingleObject ResetEvent SetEvent DeleteCriticalSection LeaveCriticalSection EnterCriticalSection InitializeCriticalSection Sleep GetTickCount SetConsoleCtrlHandler SetConsoleTextAttribute GetStdHandle GetProcAddress CloseHandle

msvcr120

isprint isupper islower isgraph _strdup _strnicmp _close _fileno _open _read _except_handler4_common _crt_debugger_hook __crtUnhandledException __crtTerminateProcess _except1 _XcptFilter _amsg_exit __getmainargs __set_app_type _cexit _configthreadlocale __setusermatherr _initterm_e _initterm __initenv _fmode _commode ?terminate@@YAXXZ __crtSetUnhandledExceptionFilter _lock _unlock _calloc_crt __dllonexit _onexit _invoke_watson _controlfp_s _mkdir sprintf _stricmp memcpy memset printf puts srand _sleep _localtime64 _time64 __iob_func fclose fopen fprintf exit _exit calloc free malloc realloc fgets putc sscanf memmove strtok strncmp strstr atoi strtoul strncpy atol qsort rand strchr atof fputc fread fwrite _beginthreadex feof fputs vsprintf system longjmp isalpha isdigit isspace isalnum tolower _setjmp3 fseek strtol isxdigit strrchr _strtoi64 _errno memchr _fstat64 _lseeki64 fflush getenv strerror __sys_nerr _gmtime64 _stat64

Name

.text

Size

509KB

Virtual Size

509KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

66KB

Virtual Size

66KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

60KB

Virtual Size

2.9MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1024B

Virtual Size

712B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

29KB

Virtual Size

28KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.guard

Size

1024B

Virtual Size

720B

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.mgcode

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.mgstate

Size

Virtual Size

2.6MB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.mgreloc

Size

29KB

Virtual Size

28KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.pbnd

Size

1024B

Virtual Size

800B

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-10-04_a5c99c64963ac3f6fc114e4d05748936_elex_floxif_maze

ws2_32

wldap32

kernel32

msvcr120

generic