2026-10-10_a776d5b6feddfb71516d0acd9e93edb9_elex_stop

Sharing

Copy URL Twitter E-mail

General

Target
2026-10-10_a776d5b6feddfb71516d0acd9e93edb9_elex_stop
Size 1.2MB
Sample261011-g2jrcswzhy
SHA256 b29878550b3cc17f703d4925c954d50f5870eb0bea6ae4045777fcffaa1686c3
MD5 a776d5b6feddfb71516d0acd9e93edb9
SHA1 5ffa7b4f5bf0d79c36148b69fed4922288e92a10
SHA512 a1c452a444c197e9fcc69b3b01e2b1f3688b0aad1f352cd822c4b4e120e0ec97f97662134700bd9d6b94c86ec1c4480bcb99189b842a37557a16596dfdea3b65
SSDEEP 24576:nvpH41Cl36RgrO/+xto6R1MTXSDU9VH+zPlq7:XmGtoZTXSDb47
TLSH
T16455DF417BF6C2B7DBC241B508A6871A46379CC127AF9EC7F7C03C599D302D96A3A285
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-10-10_a776d5b6feddfb71516d0acd9e93edb9_elex_stop

File Explorer

2026-10-10_a776d5b6feddfb71516d0acd9e93edb9_elex_stop

.exe 1.2MB

2026-10-10_a776d5b6feddfb71516d0acd9e93edb9_elex_stop

IMPHASH 7ea4d3b4981577bc540bdfb878a962cf
SHA256 b29878550b3cc17f703d4925c954d50f5870eb0bea6ae4045777fcffaa1686c3
MD5 a776d5b6feddfb71516d0acd9e93edb9
SHA1 5ffa7b4f5bf0d79c36148b69fed4922288e92a10
SHA512 a1c452a444c197e9fcc69b3b01e2b1f3688b0aad1f352cd822c4b4e120e0ec97f97662134700bd9d6b94c86ec1c4480bcb99189b842a37557a16596dfdea3b65
SSDEEP 24576:nvpH41Cl36RgrO/+xto6R1MTXSDU9VH+zPlq7:XmGtoZTXSDb47
TLSH
T16455DF417BF6C2B7DBC241B508A6871A46379CC127AF9EC7F7C03C599D302D96A3A285
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

81080

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

e:\TXPCGJ\QQPCMgr_proj\13.0.46265.301_for_gf2.0_dev\Source\Setup\PackageTools\product\win32\dbginfo\kpacket.pdb

kernel32

SizeofResource LockResource LoadResource GetTempPathW CreateFileW FindResourceExW GetCurrentProcess GetFileSize GetModuleHandleW ExpandEnvironmentStringsW TerminateProcess GetWindowsDirectoryW FindFirstFileW lstrcmpW GetCurrentDirectoryW SetFileAttributesW DeleteFileW MoveFileExW GetFileAttributesW GetTickCount CreateDirectoryW GetLastError FindNextFileW SetFilePointer FindClose ReadFile RemoveDirectoryW WriteFile CreateProcessW GetModuleFileNameW WaitForSingleObject GetSystemDirectoryW MultiByteToWideChar GetCommandLineW WideCharToMultiByte UnmapViewOfFile SetEndOfFile CreateFileMappingW MapViewOfFile EnterCriticalSection GetCurrentProcessId WaitForMultipleObjects VirtualFree VirtualAlloc DeleteCriticalSection SetEvent InitializeCriticalSection ReleaseSemaphore ResetEvent CreateSemaphoreW CreateEventW GetStdHandle GetFileInformationByHandle CopyFileW SetFileTime MoveFileW GetTempFileNameW GetSystemInfo SystemTimeToFileTime LocalFileTimeToFileTime FileTimeToSystemTime GetLocalTime WriteConsoleW GetConsoleOutputCP WriteConsoleA GetLocaleInfoW CreateFileA CloseHandle FindResourceW GetProcAddress LoadLibraryW LeaveCriticalSection FlushFileBuffers SetStdHandle LoadLibraryA GetConsoleMode GetConsoleCP GetSystemTimeAsFileTime QueryPerformanceCounter GetCommandLineA GetEnvironmentStringsW FreeEnvironmentStringsW GetEnvironmentStrings FreeEnvironmentStringsA GetStartupInfoA GetFileType SetHandleCount GetModuleFileNameA HeapCreate GetStringTypeW RaiseException GetVersionExA HeapDestroy HeapAlloc HeapFree HeapReAlloc HeapSize GetProcessHeap InterlockedExchange GetACP GetLocaleInfoA GetThreadLocale InterlockedIncrement InterlockedDecrement Sleep UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent ExitThread GetCurrentThreadId CreateThread GetStartupInfoW RtlUnwind LCMapStringA LCMapStringW GetCPInfo GetOEMCP IsValidCodePage GetModuleHandleA TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError ExitProcess GetUserDefaultLCID EnumSystemLocalesA IsValidLocale GetStringTypeA

user32

UnregisterClassA CharLowerW CharUpperW GetDesktopWindow

advapi32

RegQueryValueExW RegCloseKey RegOpenKeyExW

ole32

CoUninitialize CoInitialize

oleaut32

SysFreeString SysAllocString VariantClear VariantCopy

shlwapi

PathAddBackslashW PathRemoveFileSpecW PathIsDirectoryW PathAppendW PathFileExistsW

Sharing

General

Malware Config

Signatures

File Explorer

2026-10-10_a776d5b6feddfb71516d0acd9e93edb9_elex_stop

kernel32

user32

advapi32

ole32

oleaut32

shlwapi

generic