2026-10-12_b95096e0ecd706fb13fec2caf0347017_amadey_elex_floxif_hellokitty_manuscrypt

General

Target
2026-10-12_b95096e0ecd706fb13fec2caf0347017_amadey_elex_floxif_hellokitty_manuscrypt
Size 196KB
Sample261013-13lrwsde34
SHA256 9f8988c5a2af499bb3776471cd92286d19de1515ab8cdcd8f9e19a01c52f6531
MD5 b95096e0ecd706fb13fec2caf0347017
SHA1 78bba2890fabda61d2c1353334fda874fafd94a7
SHA512 9a9b5175a02922b76c4e92dcdf3b669b09eeb6e13c73c5945554701fe90835ab01fb8bbb1c30163e82a457c1412f790f33ed26e5da486ee740615bd21f263390
SSDEEP 3072:0IF1UyblE1sxZFZLUp2xmXKEPgxrJh2lQBV+UdE+rECWp7hKP:0IF1qsxK7XKEPEJ1BV+UdvrEFp7hKP
TLSH
T12314AF0070D187FFD5655830386DAF64A8F9FB3C0E654AABA354520E4F7C1938A26E2F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-10-12_b95096e0ecd706fb13fec2caf0347017_amadey_elex_floxif_hellokitty_manuscrypt

File Explorer

2026-10-12_b95096e0ecd706fb13fec2caf0347017_amadey_elex_floxif_hellokitty_manuscrypt

.exe 196KB

2026-10-12_b95096e0ecd706fb13fec2caf0347017_amadey_elex_floxif_hellokitty_manuscrypt

IMPHASH 45c0ea7f9aeef1c53ac495568e0f681e
SHA256 9f8988c5a2af499bb3776471cd92286d19de1515ab8cdcd8f9e19a01c52f6531
MD5 b95096e0ecd706fb13fec2caf0347017
SHA1 78bba2890fabda61d2c1353334fda874fafd94a7
SHA512 9a9b5175a02922b76c4e92dcdf3b669b09eeb6e13c73c5945554701fe90835ab01fb8bbb1c30163e82a457c1412f790f33ed26e5da486ee740615bd21f263390
SSDEEP 3072:0IF1UyblE1sxZFZLUp2xmXKEPgxrJh2lQBV+UdE+rECWp7hKP:0IF1qsxK7XKEPEJ1BV+UdvrEFp7hKP
TLSH
T12314AF0070D187FFD5655830386DAF64A8F9FB3C0E654AABA354520E4F7C1938A26E2F
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

17289

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\code\U2\0911\UDISK_SW_U2\Complier\Loader\Release_MFC\Loader_MFC.pdb

shell32

ShellExecuteW

kernel32

LeaveCriticalSection WriteConsoleW GetModuleFileNameW GetNativeSystemInfo GetConsoleMode GetConsoleCP FlushFileBuffers FormatMessageW WideCharToMultiByte GetLastError CreateFileW FindClose FindFirstFileExW FindNextFileW GetFileAttributesExW SetFilePointerEx CloseHandle MultiByteToWideChar SetLastError InitializeCriticalSectionAndSpinCount SwitchToThread TlsAlloc TlsGetValue TlsSetValue TlsFree GetSystemTimeAsFileTime GetModuleHandleW GetProcAddress UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId InitializeSListHead IsDebuggerPresent GetStartupInfoW RtlUnwind RaiseException EncodePointer EnterCriticalSection DecodePointer DeleteCriticalSection FreeLibrary LoadLibraryExW GetStdHandle WriteFile ExitProcess GetModuleHandleExW GetACP HeapAlloc HeapFree IsValidCodePage GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW LCMapStringW SetStdHandle GetFileType GetStringTypeW GetProcessHeap HeapSize HeapReAlloc

user32

MessageBoxW

Sharing

General

Malware Config

Signatures

File Explorer

2026-10-12_b95096e0ecd706fb13fec2caf0347017_amadey_elex_floxif_hellokitty_manuscrypt

shell32

kernel32

user32

generic