2026-10-26_e35dde9631d2ae29469e90062ac76f08_elex_mafia

Sharing

Copy URL Twitter E-mail

General

Target
2026-10-26_e35dde9631d2ae29469e90062ac76f08_elex_mafia
Size 560KB
Sample261027-ez8llaav4w
SHA256 e643928b429e605388811e1d4a1b6247b31525f17daa401f7d3c660b6adff958
MD5 e35dde9631d2ae29469e90062ac76f08
SHA1 7bcdcd3a5f715da13aa45cde1f3137f7747fcd7b
SHA512 24adb1fff032ae00c3c7dfc0d25bea23552b1a36f59273f95de8bb1dac89dfb2527de62ede9f6dcbe9d5c8c86aa7aa07d2777657d761d7c685877a337d0f8f79
SSDEEP 6144:pfz5j/PeFHl0WL9kE/0O9acDMy0dPWYv9Q2ayhzEGtpaFjrQmlyR9AUyaWWZPvIF:nQldF/WcDMy0x/vpAUPWsIjThRj8NZu
TLSH
T157C4F0127684C136E58312345B66EBA2293E7C35973A98C37B94362E2FB67C2D375307
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-10-26_e35dde9631d2ae29469e90062ac76f08_elex_mafia

File Explorer

2026-10-26_e35dde9631d2ae29469e90062ac76f08_elex_mafia

.exe 560KB

2026-10-26_e35dde9631d2ae29469e90062ac76f08_elex_mafia

SHA256 e643928b429e605388811e1d4a1b6247b31525f17daa401f7d3c660b6adff958
MD5 e35dde9631d2ae29469e90062ac76f08
SHA1 7bcdcd3a5f715da13aa45cde1f3137f7747fcd7b
SHA512 24adb1fff032ae00c3c7dfc0d25bea23552b1a36f59273f95de8bb1dac89dfb2527de62ede9f6dcbe9d5c8c86aa7aa07d2777657d761d7c685877a337d0f8f79
SSDEEP 6144:pfz5j/PeFHl0WL9kE/0O9acDMy0dPWYv9Q2ayhzEGtpaFjrQmlyR9AUyaWWZPvIF:nQldF/WcDMy0x/vpAUPWsIjThRj8NZu
TLSH
T157C4F0127684C136E58312345B66EBA2293E7C35973A98C37B94362E2FB67C2D375307
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

70582

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

Name

.text

Size

136KB

Virtual Size

136KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

24KB

Virtual Size

24KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

283KB

Virtual Size

283KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

50KB

Virtual Size

50KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.gfids

Size

10KB

Virtual Size

10KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.rsrc

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rdata

Size

8KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

8KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-10-26_e35dde9631d2ae29469e90062ac76f08_elex_mafia

generic