2026-11-07_c88a13d8e29f9ef9cb1daab0923cd19c_elex_mafia

General

Target
2026-11-07_c88a13d8e29f9ef9cb1daab0923cd19c_elex_mafia
Size 521KB
Sample261107-maydbsct4k
SHA256 4bb69a5fdeabb287551da0988a40cdf9d0cc88d2e836ef86b4abe80584241945
MD5 c88a13d8e29f9ef9cb1daab0923cd19c
SHA1 f6b4eb3b140e319e042d85abf1edb47d5af50827
SHA512 4cce72fd48835da1473f26d9ebc841780bdeb1d2b021a8c75b7106bea9863aaa2f679ff61b6208cdeafefd53ed22959404f003077dd79f4d4afdc6bd523263b5
SSDEEP 6144:zvLUgXFL4l/0QbRHR45HfGmxGb0Xsde+9lupsU5Yy26mOiBgVGF4DAZjzR736lDP:klBHR2HtxGbtssU5h0vgm9IgHxaONZi
TLSH
T1B6B4F1157584C032E29201384B66EFA2497EBD729B7AE5C737D0663E2FB52D4E2B4307
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-11-07_c88a13d8e29f9ef9cb1daab0923cd19c_elex_mafia

File Explorer

2026-11-07_c88a13d8e29f9ef9cb1daab0923cd19c_elex_mafia

.exe 521KB

2026-11-07_c88a13d8e29f9ef9cb1daab0923cd19c_elex_mafia

IMPHASH de58f4fc29c988fcef0248564284d0f7
SHA256 4bb69a5fdeabb287551da0988a40cdf9d0cc88d2e836ef86b4abe80584241945
MD5 c88a13d8e29f9ef9cb1daab0923cd19c
SHA1 f6b4eb3b140e319e042d85abf1edb47d5af50827
SHA512 4cce72fd48835da1473f26d9ebc841780bdeb1d2b021a8c75b7106bea9863aaa2f679ff61b6208cdeafefd53ed22959404f003077dd79f4d4afdc6bd523263b5
SSDEEP 6144:zvLUgXFL4l/0QbRHR45HfGmxGb0Xsde+9lupsU5Yy26mOiBgVGF4DAZjzR736lDP:klBHR2HtxGbtssU5h0vgm9IgHxaONZi
TLSH
T1B6B4F1157584C032E29201384B66EFA2497EBD729B7AE5C737D0663E2FB52D4E2B4307
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

144367

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetModuleHandleW GetComputerNameW GetLocalTime SystemTimeToFileTime FileTimeToSystemTime SizeofResource LockResource LoadResource FindResourceW FindResourceExW MultiByteToWideChar GetProcAddress LoadLibraryW GetCurrentProcess LeaveCriticalSection EnterCriticalSection DeleteCriticalSection InitializeCriticalSection GetLastError CloseHandle WideCharToMultiByte MoveFileW DeleteFileW CreateDirectoryW SetFileAttributesW GetTempPathW GetTempFileNameW MoveFileExW lstrlenW CreateFileW GetFileSize ReadFile WriteFile Sleep GetComputerNameA GetModuleFileNameW CreateProcessW GetSystemTime FileTimeToLocalFileTime RaiseException InitializeCriticalSectionAndSpinCount HeapDestroy HeapAlloc HeapFree HeapReAlloc HeapSize GetProcessHeap LocalAlloc SetEndOfFile SetStdHandle WriteConsoleW FreeLibrary LoadLibraryA InterlockedIncrement InterlockedDecrement InterlockedExchange EncodePointer DecodePointer GetCommandLineW HeapSetInformation GetStartupInfoW GetCurrentThreadId RtlUnwind LCMapStringW GetCPInfo SetUnhandledExceptionFilter ExitProcess GetStdHandle FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType TlsAlloc TlsGetValue TlsSetValue TlsFree SetLastError HeapCreate QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime TerminateProcess UnhandledExceptionFilter IsDebuggerPresent IsProcessorFeaturePresent GetConsoleCP GetConsoleMode GetACP GetOEMCP IsValidCodePage SetFilePointer FlushFileBuffers GetUserDefaultLCID GetLocaleInfoW GetLocaleInfoA EnumSystemLocalesA IsValidLocale GetStringTypeW

ole32

BindMoniker CoInitialize

shlwapi

PathIsRootW PathFileExistsW PathAppendW PathAddExtensionW PathRemoveExtensionW

Name

.text

Size

136KB

Virtual Size

136KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

24KB

Virtual Size

24KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

283KB

Virtual Size

283KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

50KB

Virtual Size

50KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

10KB

Virtual Size

10KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.iobf

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-11-07_c88a13d8e29f9ef9cb1daab0923cd19c_elex_mafia

kernel32

ole32

shlwapi

generic