Static task
static1
General
-
Target
2025-07-04_e4ccf7bedec6e268bbe6525eea031e1f_amadey_darkgate_elex_smoke-loader_stealc
-
Size
625KB
-
MD5
e4ccf7bedec6e268bbe6525eea031e1f
-
SHA1
452745549fb223792610dfeddeaed374a6e951e5
-
SHA256
bc4a0d2ef647759adf3bf12fed9b8dd6c02873d631dadbff81b922e8cca9d9b8
-
SHA512
615a3f469fe86f532886471a5313e0ab7c19e6af68371b9f358f0e6cabaf85988ee7d762cd3fe29eb4c76476f0fd31472875b242918261c18f8e03b03aa7c9f3
-
SSDEEP
12288:CNpbGph0W2KjUnD0CbEFsiE7DIb0kyrfCEqBGPWnsVTsaOW6D:Vpn+MoeHBGm6s1Wu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2025-07-04_e4ccf7bedec6e268bbe6525eea031e1f_amadey_darkgate_elex_smoke-loader_stealc
Files
-
2025-07-04_e4ccf7bedec6e268bbe6525eea031e1f_amadey_darkgate_elex_smoke-loader_stealc.exe windows:5 windows x86 arch:x86
d6a799ff8926c34f0d48a820e9b1d72c
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleFileNameW
lstrcpyW
FlushInstructionCache
GetCurrentProcess
lstrcmpW
lstrcpynA
lstrlenA
lstrcpynW
LockResource
SetLastError
LoadLibraryA
IsBadReadPtr
GetStringTypeW
LCMapStringW
GetConsoleMode
GetConsoleCP
SetFilePointer
WideCharToMultiByte
GetSystemTimeAsFileTime
QueryPerformanceCounter
GetFileType
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
LoadLibraryExW
GetStdHandle
ExitProcess
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
GetStartupInfoW
HeapSetInformation
GetCommandLineW
DecodePointer
EncodePointer
RtlUnwind
InterlockedPopEntrySList
InterlockedPushEntrySList
InterlockedCompareExchange
HeapSize
HeapReAlloc
HeapFree
HeapAlloc
HeapDestroy
VirtualAlloc
VirtualFree
FindResourceW
LoadResource
SizeofResource
MultiByteToWideChar
MulDiv
lstrcmpiW
InterlockedDecrement
InterlockedIncrement
lstrlenW
GetVersionExW
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
EnterCriticalSection
RaiseException
LoadLibraryW
FreeLibrary
GetProcAddress
SystemTimeToFileTime
CreateMutexA
SetStdHandle
WriteConsoleW
FlushFileBuffers
Sleep
GetProcessHeap
IsProcessorFeaturePresent
GetTickCount
GetTempPathW
GetTempFileNameW
CreateFileW
GetSystemTime
WriteFile
CloseHandle
GetVersion
GetCurrentThreadId
GetModuleHandleA
OpenEventW
GetCurrentProcessId
GetProcessVersion
OpenMutexW
GetModuleHandleW
GetLastError
OpenMutexA
HeapCreate
WaitForSingleObject
user32
EndDialog
GetWindow
MonitorFromWindow
GetDC
RegisterClassExW
ShowWindow
RemoveMenu
AppendMenuW
CreatePopupMenu
DialogBoxParamW
LoadStringA
PostQuitMessage
LoadStringW
GetWindowRect
TranslateAcceleratorW
SetMenuDefaultItem
GetClassInfoExW
SetMenu
GetMenu
DestroyWindow
LoadImageW
LoadBitmapW
PeekMessageW
IsMenu
SetWindowsHookExW
GetClassNameW
CallNextHookEx
GetKeyState
CharLowerW
UnhookWindowsHookEx
InflateRect
RegisterWindowMessageW
TrackPopupMenuEx
WindowFromPoint
MessageBeep
FrameRect
ModifyMenuW
MonitorFromPoint
GetMonitorInfoW
DrawFrameControl
SetMenuItemInfoW
GetMenuItemInfoW
GetMenuItemID
GetMenuItemCount
GetActiveWindow
GetWindowThreadProcessId
IsWindowEnabled
IsWindowVisible
MapWindowPoints
PostMessageW
DestroyMenu
GetCapture
SetCursor
ReleaseDC
GetWindowDC
SystemParametersInfoW
GetMessagePos
PtInRect
ReleaseCapture
SetCapture
UpdateWindow
ScreenToClient
OffsetRect
EndPaint
BeginPaint
SetRect
DrawEdge
DrawTextW
FillRect
CallWindowProcW
GetParent
SetFocus
InvalidateRect
GetClientRect
SetWindowPos
SendMessageW
CreateWindowExW
SetRectEmpty
LoadCursorW
CharNextW
DefWindowProcW
IsWindow
GetWindowLongW
SetWindowLongW
GetDesktopWindow
GetSysColorBrush
GetSysColor
GetFocus
GetForegroundWindow
GetCursor
GetSystemMetrics
GetSubMenu
UnregisterClassA
gdi32
GetCurrentObject
CreateDIBSection
SetBkColor
SetBrushOrgEx
CreateFontIndirectW
CreateCompatibleBitmap
BitBlt
CreateCompatibleDC
CreateBitmap
CreatePatternBrush
PatBlt
DeleteDC
LineTo
MoveToEx
CreatePen
SetTextColor
SetBkMode
GetStockObject
DeleteObject
SelectObject
GetObjectW
ole32
CoCreateInstance
CoTaskMemRealloc
CoTaskMemAlloc
CoTaskMemFree
oleaut32
VarUI4FromStr
advapi32
RegOpenKeyExW
RegDeleteKeyW
RegDeleteValueW
RegCloseKey
RegSetValueExW
RegQueryInfoKeyW
RegEnumKeyExW
RegCreateKeyExW
comctl32
ImageList_Destroy
ImageList_GetImageCount
ImageList_Draw
ImageList_DrawIndirect
CreateStatusWindowW
ord8
ImageList_Create
ImageList_LoadImageW
InitCommonControlsEx
ImageList_AddMasked
Sections
.text Size: 155KB - Virtual size: 154KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 33KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 408KB - Virtual size: 408KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ