2026-05-22_4531afb5f7a1138bcc45eaacd7b17eba_amadey_darkgate_elex_rhadamanthys_smoke-loader_stop

General

Target
2026-05-22_4531afb5f7a1138bcc45eaacd7b17eba_amadey_darkgate_elex_rhadamanthys_smoke-loader_stop
Size 2.8MB
Sample260522-kvsbpsgs3k
SHA256 6f68c9f4b891e4366c3b54cd7005aa044c72d1c369b70d4ebea854c9f367214a
MD5 4531afb5f7a1138bcc45eaacd7b17eba
SHA1 1e976ff9f94e9f0219c862038edf0603a2550a75
SHA512 3116de9d10b225cae08b620867c1e4867d510a5833e9d7b0dba2396f1594a9a34c4163ae381c7aaea2ae515657e726cd3e739a52fd053640c565a2e2d92a3022
SSDEEP 49152:JzEw6kITeqDqnstLet3LyfcHiLHkJEqqJtb2In:JAweeqDqnstLEsDm
TLSH
T146D52922A2F54231E076F53499A0623D95767E119E32CA4FF648F21D293B6F2B935333
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-05-22_4531afb5f7a1138bcc45eaacd7b17eba_amadey_darkgate_elex_rhadamanthys_smoke-loader_stop

2026-05-22_4531afb5f7a1138bcc45eaacd7b17eba_amadey_darkgate_elex_rhadamanthys_smoke-loader_stop

.exe 2.8MB

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 6f68c9f4b891e4366c3b54cd7005aa044c72d1c369b70d4ebea854c9f367214a
MD5 4531afb5f7a1138bcc45eaacd7b17eba
SHA1 1e976ff9f94e9f0219c862038edf0603a2550a75
SHA512 3116de9d10b225cae08b620867c1e4867d510a5833e9d7b0dba2396f1594a9a34c4163ae381c7aaea2ae515657e726cd3e739a52fd053640c565a2e2d92a3022
SSDEEP 49152:JzEw6kITeqDqnstLet3LyfcHiLHkJEqqJtb2In:JAweeqDqnstLEsDm
TLSH
T146D52922A2F54231E076F53499A0623D95767E119E32CA4FF648F21D293B6F2B935333
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

4

Entry point

138990

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

WsatConfig.pdb