2026-05-19_49437c36913d5c481cb0af9ec92dae51_amadey_darkgate_elex_floxif_smoke-loader

Sharing

Copy URL Twitter E-mail

General

Target
2026-05-19_49437c36913d5c481cb0af9ec92dae51_amadey_darkgate_elex_floxif_smoke-loader
Size 1.7MB
Sample260519-e7skcaby4l
SHA256 197d374458ac87bfcbf9a687d722973731311963a8109c5f98abea650a6b6588
MD5 49437c36913d5c481cb0af9ec92dae51
SHA1 787f297fb9042b295fdc0a9553986c02bc54be7d
SHA512 15e3758e1e42c1a3e682b26ec96f269ef4a1c76525f183b8d7111b8265a86d696e29bf15f741a1bddd9be32a8a1a915b567bb2399d1505aae4ca79266890eb89
SSDEEP 24576:TvWDO5Teo5TByUaefN4vcNS5UFq8Um9v2KahY2LfdxdVtN115XsIyvA3krEH7R:DWDO5T56efKviDYDLfdhtN13XsIQA3F
TLSH
T11F858C23D652913FED8F1234FE3E7F8E8C2DA671137121CB93542E99AE211D2AA35507
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-05-19_49437c36913d5c481cb0af9ec92dae51_amadey_darkgate_elex_floxif_smoke-loader

File Explorer

2026-05-19_49437c36913d5c481cb0af9ec92dae51_amadey_darkgate_elex_floxif_smoke-loader

.exe 1.7MB

2026-05-19_49437c36913d5c481cb0af9ec92dae51_amadey_darkgate_elex_floxif_smoke-loader

IMPHASH 72dfd72d68de0c9a25a89a9b78d402f3
SHA256 197d374458ac87bfcbf9a687d722973731311963a8109c5f98abea650a6b6588
MD5 49437c36913d5c481cb0af9ec92dae51
SHA1 787f297fb9042b295fdc0a9553986c02bc54be7d
SHA512 15e3758e1e42c1a3e682b26ec96f269ef4a1c76525f183b8d7111b8265a86d696e29bf15f741a1bddd9be32a8a1a915b567bb2399d1505aae4ca79266890eb89
SSDEEP 24576:TvWDO5Teo5TByUaefN4vcNS5UFq8Um9v2KahY2LfdxdVtN115XsIyvA3krEH7R:DWDO5T56efKviDYDLfdhtN13XsIQA3F
TLSH
T11F858C23D652913FED8F1234FE3E7F8E8C2DA671137121CB93542E99AE211D2AA35507
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

1183697

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

E:\sourcecode\ghe\ControlCenter4\binary\Release\BrCcUxSys.pdb

comctl32

ord16 PropertySheetW CreatePropertySheetPageW ord17

msimg32

AlphaBlend GradientFill

shlwapi

PathFileExistsW PathFindFileNameW PathIsDirectoryW StrCmpW PathAddBackslashW

kernel32

GetDateFormatW GetLocalTime HeapReAlloc HeapAlloc HeapFree GetProcessHeap OpenProcess GetTimeFormatW FileTimeToSystemTime CompareStringW GetExitCodeThread FileTimeToLocalFileTime GetCurrentProcessId SetFileAttributesW FindResourceW LoadResource LockResource GetPrivateProfileStringW GetPrivateProfileIntW GetModuleHandleW GetACP IsValidCodePage MulDiv GetLocaleInfoW GetModuleFileNameW CreateMutexW ReleaseMutex GetCurrentProcess ConnectNamedPipe CreateNamedPipeW FlushFileBuffers GetFileSize CopyFileW GetFileTime Sleep ReleaseSemaphore CreateSemaphoreW OpenSemaphoreW lstrcpynW lstrcatW GetTempFileNameW GetFileAttributesW ExpandEnvironmentStringsA TlsFree TlsSetValue TlsGetValue TlsAlloc HeapDestroy HeapCreate ExitProcess HeapSize IsProcessorFeaturePresent GetStdHandle IsDebuggerPresent SetUnhandledExceptionFilter UnhandledExceptionFilter TerminateProcess LCMapStringW RtlUnwind GetCPInfo RaiseException GetStartupInfoW HeapSetInformation CreateThread ResumeThread ExitThread LeaveCriticalSection EnterCriticalSection DeleteCriticalSection InitializeCriticalSection DecodePointer EncodePointer InterlockedExchange InterlockedDecrement InterlockedIncrement CreateDirectoryW GetFileSizeEx SetFilePointerEx OpenFileMappingW CreateFileMappingW FlushViewOfFile UnmapViewOfFile MapViewOfFile OpenEventW GetSystemTime FindNextFileW MoveFileExW GetCurrentThreadId GetTempPathW lstrcpyW LocalFree SetLastError FormatMessageW lstrcmpiW SetEndOfFile GetCommandLineW SetEvent WaitForSingleObject CloseHandle FindClose GetLastError CreateFileW ReadFile WriteFile FindFirstFileW LoadLibraryW LoadLibraryA GetProcAddress FreeLibrary MultiByteToWideChar WideCharToMultiByte DeleteFileW lstrlenW GetOEMCP GetStringTypeW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType SetFilePointer GetConsoleCP GetConsoleMode FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetSystemTimeAsFileTime SetStdHandle WriteConsoleW lstrcmpW

user32

GetDoubleClickTime SetPropW ReleaseCapture GetPropW AppendMenuW CreatePopupMenu SetMenuDefaultItem DestroyMenu PtInRect InflateRect SetTimer KillTimer GetGuiResources WindowFromPoint GetScrollInfo ScrollWindowEx SetScrollInfo DefWindowProcW GetActiveWindow GetClientRect MessageBoxW DialogBoxParamW GetClassLongW SetCapture RemovePropW IsDialogMessageW EndDialog CreateDialogParamW TrackMouseEvent DrawFocusRect GetKeyState PostQuitMessage SetForegroundWindow GetSysColor GetForegroundWindow GetWindowThreadProcessId GetMessageW TranslateMessage DispatchMessageW LoadStringW DestroyWindow GetWindowLongW CreateWindowExW MoveWindow wsprintfW LoadImageW UpdateWindow TrackPopupMenu RemoveMenu CheckRadioButton SetWindowRgn GetWindowTextLengthW GetWindowTextW GetDesktopWindow SetWindowTextW IsIconic IsZoomed GetWindowPlacement GetAncestor GetDlgItem ShowWindow FindWindowExW SetActiveWindow FindWindowW BringWindowToTop SetWindowPos SetCursor InvalidateRect ScreenToClient GetWindowRect GetParent GetCursorPos DrawTextW GetDC ReleaseDC SetWindowLongW CallWindowProcW EndPaint GetSystemMenu PostMessageW LoadCursorW IsWindowEnabled SetFocus BeginPaint EnableMenuItem IsWindowVisible SendMessageW EnableWindow SetProcessDefaultLayout GetSystemMetrics UnregisterClassW RegisterClassExW CharUpperW GetSysColorBrush AttachThreadInput

gdi32

CreateCompatibleBitmap CreateDIBSection CreateCompatibleDC DeleteDC GetDIBits SetBkColor GetDeviceCaps SetBkMode CreateBitmap CreateRoundRectRgn CreateRectRgn CombineRgn SetTextColor CreateFontW StretchBlt SetBrushOrgEx SetMapMode StretchDIBits SetStretchBltMode PlgBlt MoveToEx PatBlt LineTo CreatePen SetROP2 CreateSolidBrush SetLayout RoundRect GetTextExtentPoint32W SelectObject GetObjectW GetStockObject BitBlt DeleteObject

winspool.drv

ord203 DocumentPropertiesW

comdlg32

GetSaveFileNameW

advapi32

RegQueryValueExW RegDeleteValueW RegOpenKeyExW RegSetValueExW RegCloseKey CryptAcquireContextW CryptDeriveKey CryptReleaseContext CryptEncrypt CryptCreateHash CryptDecrypt CryptDestroyHash CryptHashData RegQueryValueExA RegOpenKeyExA RegCreateKeyExW

shell32

SHGetFileInfoW DoEnvironmentSubstW SHAppBarMessage SHGetFolderPathW SHGetSpecialFolderPathW Shell_NotifyIconW

ole32

CoUninitialize CoInitialize

oleaut32

SysFreeString

Sharing

General

Malware Config

Signatures

File Explorer

2026-05-19_49437c36913d5c481cb0af9ec92dae51_amadey_darkgate_elex_floxif_smoke-loader

comctl32

msimg32

shlwapi

kernel32

user32

gdi32

winspool.drv

comdlg32

advapi32

shell32

ole32

oleaut32

generic