2026-10-16_1d0a4acc236279dc56766b7bc3e7fe79_elex_floxif_stop

Sharing

Copy URL Twitter E-mail

General

Target
2026-10-16_1d0a4acc236279dc56766b7bc3e7fe79_elex_floxif_stop
Size 301KB
Sample261017-2be1psc18m
SHA256 c016f043a01d28a0be75cec4d91e001796b6191d0746be371402c32f7abf0d5a
MD5 1d0a4acc236279dc56766b7bc3e7fe79
SHA1 ff14c89311207e3fa39586a3ec2f55b2fd57b4cf
SHA512 61ac25d0a678c772ba2baba76744d7c53f0bb9e8600593a6e660cd010982e49ed085b31aee3eb483fc0ddd8a3ea505ed6a3a706c86c5bc370aa415544e282f68
SSDEEP 6144:VCwNhz26Aj2/0fga0U7Os0HBl0ULjdO9W84Cdm1BV+UdvrEFp7hKWtyd:VjTizF0Uis0HBuUHdOn981BjvrEH75t+
TLSH
T11C64AE2137D0C7FAD692297128F9937566F5F9390B7682CB73501B3D6E382C24A3934A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

Malware Config

Signatures

Codesign digest Mismatch 1 IoCs

File was altered after it was signed.

resource
2026-10-16_1d0a4acc236279dc56766b7bc3e7fe79_elex_floxif_stop

File Explorer

2026-10-16_1d0a4acc236279dc56766b7bc3e7fe79_elex_floxif_stop

.exe 301KB

2026-10-16_1d0a4acc236279dc56766b7bc3e7fe79_elex_floxif_stop

IMPHASH 0a3636cad56ee07c1dcbf1089103967c
SHA256 c016f043a01d28a0be75cec4d91e001796b6191d0746be371402c32f7abf0d5a
MD5 1d0a4acc236279dc56766b7bc3e7fe79
SHA1 ff14c89311207e3fa39586a3ec2f55b2fd57b4cf
SHA512 61ac25d0a678c772ba2baba76744d7c53f0bb9e8600593a6e660cd010982e49ed085b31aee3eb483fc0ddd8a3ea505ed6a3a706c86c5bc370aa415544e282f68
SSDEEP 6144:VCwNhz26Aj2/0fga0U7Os0HBl0ULjdO9W84Cdm1BV+UdvrEFp7hKWtyd:VjTizF0Uis0HBuUHdOn981BjvrEH75t+
TLSH
T11C64AE2137D0C7FAD692297128F9937566F5F9390B7682CB73501B3D6E382C24A3934A
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Codesign digest Mismatch

File was altered after it was signed.

PE Signature issue

Digest

c7:49:d7:5a:42:66:33:13:44:dd:93:bd:f1:a4:38:6c:c9:3f:98:ef

Digest Algorithm

sha1

PE Digests Matches

Not matched

Trusted

Not trusted

Signing Certificate

CN=Hewlett-Packard Company,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Hewlett-Packard Company,O=Hewlett-Packard Company,L=Palo Alto,ST=California,C=US

Chains

Dec 17, 2009

CN=Hewlett-Packard Company,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Hewlett-Packard Company,O=Hewlett-Packard Company,L=Palo Alto,ST=California,C=US

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Serial Number

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jun 15, 2007 - Jun 14, 2012

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Serial Number

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 4, 2003 - Dec 3, 2013

Subject

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Serial Number

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning

Timespan

Jul 16, 2004 - Jul 15, 2014

Subject

CN=Hewlett-Packard Company,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Hewlett-Packard Company,O=Hewlett-Packard Company,L=Palo Alto,ST=California,C=US

Serial Number

08:99:45:31:fd:f1:b2:eb:b8:c7:82:1b:f6:50:fd:cf

Issuer

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Dec 18, 2008 - Dec 18, 2011

Minor OS version

Major OS version

Entry point

89541

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

d:\Project\Deliverables\HPCASL35\hpqwmiex\Release\hpqWmiEx.pdb

kernel32

GetConsoleCP GetLocaleInfoA IsValidCodePage GetOEMCP GetACP GetCPInfo GetSystemTimeAsFileTime GetTickCount QueryPerformanceCounter GetStartupInfoA GetFileType SetHandleCount GetEnvironmentStringsW FreeEnvironmentStringsW GetModuleFileNameA GetConsoleMode HeapCreate VirtualAlloc VirtualFree IsDebuggerPresent SetUnhandledExceptionFilter UnhandledExceptionFilter TerminateProcess ExitProcess HeapSize HeapReAlloc GetStartupInfoW HeapFree HeapAlloc RtlUnwind GetStringTypeA GetStringTypeW LCMapStringA LCMapStringW SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW CreateFileA GetLocalTime CreateDirectoryW GetModuleHandleA SetEndOfFile FlushFileBuffers SetFilePointer WriteFile ReadFile GlobalFlags GlobalAddAtomW GlobalFindAtomW GlobalDeleteAtom LoadLibraryW LoadLibraryA lstrcmpW GetVersionExA lstrlenA lstrcmpA WideCharToMultiByte GetCurrentProcessId LockResource TlsFree GlobalFree LocalReAlloc TlsSetValue TlsAlloc GlobalAlloc GlobalHandle GlobalUnlock GlobalReAlloc GlobalLock TlsGetValue SetLastError OpenEventW PulseEvent InitializeCriticalSectionAndSpinCount GetCommandLineW SetEvent GetCurrentThreadId CreateTimerQueue CreateTimerQueueTimer GetVersionExW CreateThread Sleep GetCurrentThread GetCurrentProcess DeleteTimerQueue WaitForSingleObject CreateEventW LocalAlloc LocalFree ExpandEnvironmentStringsW DeleteFileW CreateFileW CloseHandle LoadLibraryExW GetProcessHeap FindResourceW LoadResource SizeofResource MultiByteToWideChar FreeLibrary GetModuleFileNameW InterlockedDecrement InterlockedIncrement lstrcmpiW GetModuleHandleW GetProcAddress GetLastError DeleteCriticalSection InitializeCriticalSection RaiseException lstrlenW EnterCriticalSection GetStdHandle LeaveCriticalSection

user32

WinHelpW GetCapture GetClassLongW GetClassNameW SetPropW GetPropW RemovePropW LoadIconW CharNextW LoadStringW TranslateMessage IsWindow GetForegroundWindow GetDlgItem GetTopWindow DestroyWindow GetMessageTime GetMessagePos MapWindowPoints SetMenu SetForegroundWindow GetClientRect PostMessageW CreateWindowExW GetClassInfoExW GetClassInfoW RegisterWindowMessageW AdjustWindowRectEx GetDlgCtrlID DefWindowProcW CallWindowProcW CopyRect PtInRect GetMenu SetWindowLongW SetWindowPos DispatchMessageW GetMessageW PostThreadMessageW CharUpperW UnhookWindowsHookEx MessageBoxW EnableWindow IsWindowEnabled GetLastActivePopup GetWindowLongW GetParent SendMessageW GetWindowThreadProcessId GetSubMenu GetMenuItemCount GetMenuItemID GetMenuState ValidateRect PeekMessageW GetKeyState SetWindowTextW ClientToScreen DestroyMenu TabbedTextOutW DrawTextW DrawTextExW GrayStringW PostQuitMessage RegisterClassW SystemParametersInfoA IsIconic GetWindowPlacement GetWindowRect GetWindow SetMenuItemBitmaps GetMenuCheckMarkDimensions LoadBitmapW GetFocus ModifyMenuW EnableMenuItem CheckMenuItem GetWindowTextW LoadCursorW GetSystemMetrics GetDC ReleaseDC GetSysColor GetSysColorBrush SetWindowsHookExW CallNextHookEx

gdi32

Escape SelectObject SetViewportOrgEx OffsetViewportOrgEx SetViewportExtEx ScaleViewportExtEx SetWindowExtEx ScaleWindowExtEx DeleteDC GetStockObject PtVisible TextOutW RectVisible SetMapMode GetDeviceCaps CreateBitmap GetClipBox SetTextColor SetBkColor DeleteObject ExtTextOutW RestoreDC SaveDC

winspool.drv

ClosePrinter OpenPrinterW DocumentPropertiesW

advapi32

StartServiceCtrlDispatcherW RegisterServiceCtrlHandlerW CreateWellKnownSid ControlService DeleteService OpenThreadToken OpenProcessToken SetSecurityDescriptorDacl CreateServiceW InitializeAcl AddAccessAllowedAce GetAclInformation AddAce GetAce GetTokenInformation SetSecurityDescriptorGroup SetSecurityDescriptorOwner InitializeSecurityDescriptor IsValidSid GetLengthSid CopySid RegQueryValueExW RegisterEventSourceW ReportEventW DeregisterEventSource SetServiceStatus OpenSCManagerW OpenServiceW CloseServiceHandle RegEnumKeyExW RegQueryInfoKeyW RegSetValueExW RegOpenKeyExW RegCreateKeyExW RegCloseKey RegDeleteValueW RegDeleteKeyW

shell32

SHGetFolderPathW

ole32

CoResumeClassObjects CoInitializeSecurity CoCreateInstance StringFromGUID2 CoUninitialize CoRevokeClassObject CoSuspendClassObjects CoInitializeEx CoTaskMemFree CoTaskMemRealloc CoTaskMemAlloc CoFreeUnusedLibraries CoSetProxyBlanket CoRegisterClassObject

oleaut32

VarUI4FromStr SysStringLen LoadRegTypeLi LoadTypeLi SysAllocString VariantChangeType VariantInit RegisterTypeLi UnRegisterTypeLi SafeArrayCreateVector SafeArrayPutElement SafeArrayDestroy VariantClear SysFreeString

oleacc

CreateStdAccessibleObject LresultFromObject

Sharing

General

Malware Config

Signatures

File Explorer

2026-10-16_1d0a4acc236279dc56766b7bc3e7fe79_elex_floxif_stop

PE Signature issue

kernel32

user32

gdi32

winspool.drv

advapi32

shell32

ole32

oleaut32

oleacc

generic