2026-05-06_3b9142101e2afb5a86f4949a9c4c35b8_amadey_darkgate_elex_glassworm_smoke-loader_stop_wannacry

General

Target
2026-05-06_3b9142101e2afb5a86f4949a9c4c35b8_amadey_darkgate_elex_glassworm_smoke-loader_stop_wannacry
Size 5.3MB
Sample260506-nap8dsgs7w
SHA256 134d6f32374ab47f0565745b4a99a6fa71dfd43d7f490792671dcbac11682276
MD5 3b9142101e2afb5a86f4949a9c4c35b8
SHA1 78065f95a6d639e9d778831fd1c25c106af0049a
SHA512 73cfca0ec56990acc07791443c2a8861b813471855e032c6da7c38dba245e742d2e570fdda0ea4376c095efabcb5baf2a7758318477b5acf84f7ab5a4f281c89
SSDEEP 49152:B7edCK0DZT88fIf/akOElMaFLk7xzQrRokplBMO+YrovpU/9JhKPgssSt2gzcY/3:xK5nak7drRokqOgmhv7StiF
TLSH
T19B467D21BAB08035D07796709A75A65896367C208B7289CF63C53EAEBFB17E14D31733
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Detects executables packed with ASPack 1 IoCs

resource	yara_rule
sample	INDICATOR_EXE_Packed_ASPack

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-05-06_3b9142101e2afb5a86f4949a9c4c35b8_amadey_darkgate_elex_glassworm_smoke-loader_stop_wannacry

2026-05-06_3b9142101e2afb5a86f4949a9c4c35b8_amadey_darkgate_elex_glassworm_smoke-loader_stop_wannacry

.exe 5.3MB

IMPHASH b941ddedcc51e5706d41335adb4e6b2a
SHA256 134d6f32374ab47f0565745b4a99a6fa71dfd43d7f490792671dcbac11682276
MD5 3b9142101e2afb5a86f4949a9c4c35b8
SHA1 78065f95a6d639e9d778831fd1c25c106af0049a
SHA512 73cfca0ec56990acc07791443c2a8861b813471855e032c6da7c38dba245e742d2e570fdda0ea4376c095efabcb5baf2a7758318477b5acf84f7ab5a4f281c89
SSDEEP 49152:B7edCK0DZT88fIf/akOElMaFLk7xzQrRokplBMO+YrovpU/9JhKPgssSt2gzcY/3:xK5nak7drRokqOgmhv7StiF
TLSH
T19B467D21BAB08035D07796709A75A65896367C208B7289CF63C53EAEBFB17E14D31733
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

4

Entry point

5336

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths