General

  • Target
    2026-10-22_858f43cd2b5f7c0ad4c4de2a5260512d_elex_floxif_stop
  • Size 4.7MB
  • Sample261024-gxddsags5w
  • SHA256 0b768ce4ed1f160f77ae4ba4ffe2996c729109b2026d6ae917516c77ca8b473a
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10

Malware Config

Signatures

  • Codesign digest Mismatch 1 IoCs

    File was altered after it was signed.

File Explorer

  • 2026-10-22_858f43cd2b5f7c0ad4c4de2a5260512d_elex_floxif_stop
    .exe 4.7MB

2026-10-22_858f43cd2b5f7c0ad4c4de2a5260512d_elex_floxif_stop

  • IMPHASH dacd739073f4630c8c35ee6d7445db6e
  • SHA256 0b768ce4ed1f160f77ae4ba4ffe2996c729109b2026d6ae917516c77ca8b473a
  • MD5 SHA1 SHA512 SSDEEP TLSH
  • Codesign digest Mismatch

    File was altered after it was signed.

PE Signature issue

Digest
d1:79:be:8f:bb:37:72:dc:6e:ca:00:c6:d1:40:56:d1:82:04:af:93
Digest Algorithm
sha1
PE Digests Matches
Not matched
Trusted
Signing Certificate
CN=Symantec Corporation,OU=Endpoint Management Group,O=Symantec Corporation,L=Lindon,ST=Utah,C=US
Minor OS version
0
Major OS version
5
Entry point
3055139
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE
PDB paths
c:\depotCI\Ghost\GSSTrunk\Ghost\ghost\src\core\vs2008\Win32\Release\Ghost32.pdb