2026-10-22_363868b269022123b8ce0753826900ac_elex_floxif_stop

General

Target
2026-10-22_363868b269022123b8ce0753826900ac_elex_floxif_stop
Size 49.6MB
Sample261024-vbterscy3l
SHA256 27795952357dcd12be894d7339499b489420ee518a9e1a08167c6206f6f91c2b
MD5 363868b269022123b8ce0753826900ac
SHA1 6af1cc69a8a396db91623103502e7284639946e7
SHA512 a7d820a9a4100b0192247f4f362e1c18ed8d4a33f9499a1e09587b436c38180fb210276c1b2d1a5becd1749ea76f6a5e1f89dda206a62f6de88ee034c4d16ed9
SSDEEP 786432:gy9/2T238Sy5hw2wbIi4wwOHBjzX+vl7pPO0BK8BDuYA7m/ivLkR9nT1eU3+8DpT:gyITaynkIz6BjzXkPO0fiwxTfrDTyKX
TLSH
T1F7B733F5EC8546D4FF9295FD10059A88F258BCED6A602E05DB0077CFE93F86682E4AC1
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

Malware Config

Signatures

Codesign digest Mismatch 1 IoCs

File was altered after it was signed.

resource
2026-10-22_363868b269022123b8ce0753826900ac_elex_floxif_stop

File Explorer

2026-10-22_363868b269022123b8ce0753826900ac_elex_floxif_stop

.exe 49.6MB

2026-10-22_363868b269022123b8ce0753826900ac_elex_floxif_stop

IMPHASH fd859c95f20dbb83cce7f9cdfbeb68c0
SHA256 27795952357dcd12be894d7339499b489420ee518a9e1a08167c6206f6f91c2b
MD5 363868b269022123b8ce0753826900ac
SHA1 6af1cc69a8a396db91623103502e7284639946e7
SHA512 a7d820a9a4100b0192247f4f362e1c18ed8d4a33f9499a1e09587b436c38180fb210276c1b2d1a5becd1749ea76f6a5e1f89dda206a62f6de88ee034c4d16ed9
SSDEEP 786432:gy9/2T238Sy5hw2wbIi4wwOHBjzX+vl7pPO0BK8BDuYA7m/ivLkR9nT1eU3+8DpT:gyITaynkIz6BjzXkPO0fiwxTfrDTyKX
TLSH
T1F7B733F5EC8546D4FF9295FD10059A88F258BCED6A602E05DB0077CFE93F86682E4AC1
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Codesign digest Mismatch

File was altered after it was signed.

PE Signature issue

Digest

41:7b:ea:2a:55:a4:9a:a5:b9:9c:54:21:a9:2b:0e:b3:20:eb:74:fc

Digest Algorithm

sha1

PE Digests Matches

Not matched

Trusted

Not trusted

Signing Certificate

CN=Trimble Navigation,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=E&C,O=Trimble Navigation,L=Westminster,ST=Colorado,C=US

Chains

Dec 4, 2012

CN=Trimble Navigation,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=E&C,O=Trimble Navigation,L=Westminster,ST=Colorado,C=US

Subject

CN=Symantec Time Stamping Services Signer - G3,O=Symantec Corporation,C=US

Serial Number

79:a2:a5:85:f9:d1:15:42:13:d9:b8:3e:f6:b6:8d:ed

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

May 1, 2012 - Dec 31, 2012

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Serial Number

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 4, 2003 - Dec 3, 2013

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Serial Number

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning

Timespan

May 21, 2009 - May 20, 2019

Subject

CN=Trimble Navigation,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=E&C,O=Trimble Navigation,L=Westminster,ST=Colorado,C=US

Serial Number

71:41:02:80:16:06:bd:29:07:2f:be:39:41:47:39:e1

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jan 5, 2010 - Jan 8, 2013

Minor OS version

0

Major OS version

4

Entry point

84635

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

oleaut32

SysAllocString VariantClear

user32

SetTimer SendMessageA DialogBoxParamW DialogBoxParamA GetWindowLongA SetWindowLongA SetWindowTextW SetWindowTextA KillTimer LoadStringW LoadStringA CharUpperW CharUpperA DestroyWindow EndDialog PostMessageA ShowWindow MessageBoxW GetDlgItem LoadIconA

shell32

ShellExecuteExA

kernel32

LCMapStringW LCMapStringA GetStringTypeW GetStringTypeA GetLocaleInfoA GetOEMCP GetACP GetCPInfo GetSystemTimeAsFileTime GetCurrentProcessId GetTickCount QueryPerformanceCounter GetFileType SetHandleCount GetEnvironmentStringsW FreeEnvironmentStringsW GetEnvironmentStrings FreeEnvironmentStringsA HeapSize ExitProcess HeapCreate HeapDestroy HeapReAlloc InterlockedDecrement InterlockedIncrement TlsFree TlsSetValue TlsAlloc TlsGetValue GetModuleHandleA GetProcAddress IsDebuggerPresent GetVersionExA SetCurrentDirectoryA WaitForSingleObject CloseHandle CreateProcessA GetCommandLineW EnterCriticalSection LeaveCriticalSection DeleteCriticalSection MultiByteToWideChar WideCharToMultiByte GetLastError LoadLibraryA AreFileApisANSI GetModuleFileNameA GetModuleFileNameW LocalFree FormatMessageA FormatMessageW SetFileTime CreateFileW SetLastError SetFileAttributesA RemoveDirectoryA CreateDirectoryA DeleteFileA GetWindowsDirectoryA SetFileAttributesW RemoveDirectoryW CreateDirectoryW DeleteFileW lstrlenA GetFullPathNameA GetCurrentDirectoryA GetTempPathA GetTempFileNameA GetFullPathNameW FindClose FindFirstFileA FindFirstFileW FindNextFileA GetFileSize SetFilePointer ReadFile WriteFile SetEndOfFile CreateFileA GetStdHandle WaitForMultipleObjects Sleep VirtualAlloc VirtualFree CreateEventA SetEvent ResetEvent InitializeCriticalSection RtlUnwind RaiseException HeapAlloc HeapFree ExitThread GetCurrentThreadId CreateThread GetCommandLineA GetProcessHeap GetStartupInfoA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter

Sharing

General

Malware Config

Signatures

File Explorer

2026-10-22_363868b269022123b8ce0753826900ac_elex_floxif_stop

PE Signature issue

oleaut32

user32

shell32

kernel32

generic