2026-07-06_5ac4292dded60634c028692a006f4054_darkgate_elex_floxif_hijackloader_mafia

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-06_5ac4292dded60634c028692a006f4054_darkgate_elex_floxif_hijackloader_mafia
Size 2.9MB
Sample260706-a2lsdscw6l
SHA256 4e8b61f6d0aa7ef3f05f72831d20fcf8be6d95defc69b795cadaad9586b3d76d
MD5 5ac4292dded60634c028692a006f4054
SHA1 9a48d6765e4ca3eb3562c595f524b97cd46a129d
SHA512 428541802317262bcc740bbf305fb419cf94e0c9e6187592a7cb8759dc74bb8e0f53908e66c400fa6a6bb0bb743ee413be80d9401d8d42aaaba8619e9b0085da
SSDEEP 49152:awXzjldQsNhPE28YpMyVZDm2iSzwcME7acAVFTdWNaSOhSk3GKcXIlfsiZgt6qlA:awX3ldQsNptVM2iSwsvAVFTJSOhSk3G8
TLSH
T1E2E5AF21BB41E036D2B22172865AA3BDA5699330073555CFA2901E3D3F785D3AA3C77F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

Malware Config

Signatures

Codesign digest Mismatch 1 IoCs

File was altered after it was signed.

resource
2026-07-06_5ac4292dded60634c028692a006f4054_darkgate_elex_floxif_hijackloader_mafia

File Explorer

2026-07-06_5ac4292dded60634c028692a006f4054_darkgate_elex_floxif_hijackloader_mafia

.exe 2.9MB

2026-07-06_5ac4292dded60634c028692a006f4054_darkgate_elex_floxif_hijackloader_mafia

IMPHASH 50b7109cb6ac0a7af28207e2e513474c
SHA256 4e8b61f6d0aa7ef3f05f72831d20fcf8be6d95defc69b795cadaad9586b3d76d
MD5 5ac4292dded60634c028692a006f4054
SHA1 9a48d6765e4ca3eb3562c595f524b97cd46a129d
SHA512 428541802317262bcc740bbf305fb419cf94e0c9e6187592a7cb8759dc74bb8e0f53908e66c400fa6a6bb0bb743ee413be80d9401d8d42aaaba8619e9b0085da
SSDEEP 49152:awXzjldQsNhPE28YpMyVZDm2iSzwcME7acAVFTdWNaSOhSk3GKcXIlfsiZgt6qlA:awX3ldQsNptVM2iSwsvAVFTJSOhSk3G8
TLSH
T1E2E5AF21BB41E036D2B22172865AA3BDA5699330073555CFA2901E3D3F785D3AA3C77F
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Codesign digest Mismatch

File was altered after it was signed.

PE Signature issue

Digest

2c:c3:44:a5:84:6c:ab:fb:a3:56:ad:d8:66:dd:a7:a2:83:fc:53:f2:e4:a0:2e:a6:ea:46:8b:e1:0c:64:8a:72

Digest Algorithm

sha256

PE Digests Matches

Not matched

Trusted

Signing Certificate

CN=ZOHO Corporation Private Limited,O=ZOHO Corporation Private Limited,L=Chennai,ST=Tamil Nadu,C=IN

Chains

Sep 16, 2024

CN=ZOHO Corporation Private Limited,O=ZOHO Corporation Private Limited,L=Chennai,ST=Tamil Nadu,C=IN

CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

CN=ZOHO Corporation Private Limited,O=ZOHO Corporation Private Limited,L=Chennai,ST=Tamil Nadu,C=IN

CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

CN=ZOHO Corporation Private Limited,O=ZOHO Corporation Private Limited,L=Chennai,ST=Tamil Nadu,C=IN

CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Serial Number

01:ee:5f:16:9d:ff:97:35:2b:64:65:d6:6a

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Sep 19, 2018 - Jan 28, 2028

Subject

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Serial Number

78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jul 28, 2020 - Mar 18, 2029

Subject

CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:03:a1:b7:08:f8:54:ab:06:72:10:d9:04:47

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

CN=ZOHO Corporation Private Limited,O=ZOHO Corporation Private Limited,L=Chennai,ST=Tamil Nadu,C=IN

Serial Number

44:85:59:e8:d5:9f:e0:56:29:9e:6e:8f

Issuer

CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Dec 11, 2023 - Oct 9, 2026

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Serial Number

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jul 14, 2023 - Oct 13, 2034

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Serial Number

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Mar 23, 2022 - Mar 22, 2037

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

Major OS version

Entry point

1820279

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

d:\Webhost\16-09-2024\WindowsBuilds\DC_NATIVE\9093392\desktopcentral\ONPREMISE\SA_SRC\native\agent\Release\dcusbsummary.pdb

setupapi

CM_Get_DevNode_Status SetupDiGetClassDevsW CM_Get_Parent CM_Get_Device_IDW SetupDiDestroyDeviceInfoList SetupDiGetDeviceRegistryPropertyW CM_Get_Child_Ex CM_Get_DevNode_Registry_Property_ExW CM_Get_Sibling_Ex CM_Get_Device_ID_ExW SetupDiGetDeviceInstanceIdW SetupDiEnumDeviceInfo

wtsapi32

WTSQuerySessionInformationW WTSFreeMemory WTSQuerySessionInformationA WTSEnumerateSessionsW WTSEnumerateSessionsA

wsock32

WSAStartup WSACleanup WSAGetLastError

userenv

UnloadUserProfile DestroyEnvironmentBlock LoadUserProfileA CreateEnvironmentBlock

iphlpapi

GetAdaptersInfo

winhttp

WinHttpOpenRequest WinHttpSetStatusCallback WinHttpAddRequestHeaders WinHttpQueryOption WinHttpWriteData WinHttpSetCredentials WinHttpQueryDataAvailable WinHttpReadData WinHttpQueryHeaders WinHttpReceiveResponse WinHttpSetOption WinHttpSendRequest WinHttpCloseHandle WinHttpOpen WinHttpConnect

dcagenthttp

AgentSendRequestEx

crypt32

CertNameToStrW CertGetNameStringA CertFindCertificateInStore CryptStringToBinaryA CertCreateCertificateContext CertCloseStore CertAddCertificateContextToStore CertEnumCertificatesInStore CertOpenStore PFXImportCertStore PFXVerifyPassword CertDeleteCertificateFromStore CertVerifyTimeValidity CertFreeCertificateContext

netapi32

NetGetJoinInformation DsGetDcNameA NetApiBufferFree

dclibxml2

xmlNewTextReaderFilename xmlStrcmp xmlFreeTextReader xmlTextReaderGetAttribute xmlParseMemory xmlParseFile xmlDocGetRootElement xmlFreeDoc xmlCleanupParser xmlNodeListGetString xmlFree xmlTextReaderRead xmlTextReaderName xmlTextReaderAttributeCount xmlTextReaderDepth xmlTextReaderValue

advapi32

RegEnumKeyExA RegQueryValueExW RegQueryInfoKeyW RegDeleteKeyW RegOpenKeyExW RegEnumKeyExW RegCloseKey RegSetValueExW OpenProcessToken LookupPrivilegeValueW AdjustTokenPrivileges RegOpenKeyExA RegQueryValueExA RegSetValueExA RegQueryValueW CryptGetHashParam OpenSCManagerW OpenServiceW QueryServiceStatus RegEnumValueW LookupPrivilegeNameA GetTokenInformation LookupAccountSidA RegisterEventSourceA ReportEventA DeregisterEventSource LookupPrivilegeValueA CreateProcessAsUserW LogonUserA CreateProcessAsUserA RegOpenKeyA RegEnumKeyA RegDeleteKeyA RegDeleteValueW RegDeleteValueA RegCreateKeyExA RegEnumValueA ControlService CryptGetUserKey CryptGenKey RegQueryInfoKeyA RegEnumKeyW CloseServiceHandle CryptAcquireContextA CryptCreateHash CryptHashData CryptDestroyKey CryptDestroyHash CryptReleaseContext ImpersonateLoggedOnUser RevertToSelf RegCreateKeyExW

shlwapi

PathFindExtensionA StrStrIA PathRemoveExtensionW PathFindExtensionW PathFindFileNameW PathStripToRootW PathIsUNCW PathRemoveFileSpecW StrTrimA

shell32

SHCreateDirectoryExA CommandLineToArgvW SHGetFileInfoW SHGetDesktopFolder SHGetPathFromIDListW SHGetSpecialFolderLocation ShellExecuteW DragFinish DragQueryFileW SHBrowseForFolderW SHAppBarMessage SHCreateDirectoryExW

odbc32

ord19 ord12 ord16 ord20 ord3 ord1 ord31 ord41 ord9 ord49 ord48 ord72 ord26 ord13 ord4 ord8 ord18 ord11 ord43 ord39 ord29 ord36 ord2

gdiplus

GdipDeleteBrush GdipLoadImageFromStream GdiplusStartup GdipGetImageWidth GdipCloneImage GdipBitmapLockBits GdipGetImagePaletteSize GdipCreateBitmapFromStream GdipDisposeImage GdipAlloc GdipDrawImageI GdipBitmapUnlockBits GdipGetImageGraphicsContext GdipDeleteGraphics GdipCreateBitmapFromScan0 GdipGetImagePixelFormat GdipGetImagePalette GdipSetInterpolationMode GdipCreateBitmapFromHBITMAP GdiplusShutdown GdipFree GdipGetImageHeight GdipCreateFontFromDC GdipDeleteStringFormat GdipCreateStringFormat GdipCreateFromHDC GdipCloneBrush GdipCreateFontFromLogfontW GdipDrawString GdipCreateSolidFill GdipSetStringFormatAlign GdipDrawImageRectI GdipCreateBitmapFromFile GdipDeleteFont

kernel32

SetEnvironmentVariableA GetDriveTypeW GetProcessHeap GetEnvironmentVariableA FindResourceExW FindResourceW LoadResource SizeofResource MultiByteToWideChar LockResource lstrlenW DeleteAtom GlobalAddAtomW lstrcpyW lstrlenA WideCharToMultiByte ReadFile CreateFileW GetFileSizeEx GetLastError CloseHandle LeaveCriticalSection InterlockedExchange EnterCriticalSection GetFileSize MulDiv SetLastError CreateDirectoryW GetModuleHandleW WriteFile Sleep GetProcAddress LocalAlloc DeleteFileW LocalFree CreateMutexW WaitForSingleObject FormatMessageW ReleaseMutex GetSystemTime DeleteFileA SystemTimeToFileTime InitializeCriticalSection BackupRead BackupWrite GetLocalTime DeleteCriticalSection FindFirstFileW FindClose FindNextFileW GetCommandLineW CreateFileA GetCurrentProcess FormatMessageA LoadLibraryW GetModuleHandleA GetFileAttributesA GetLocaleInfoA FreeLibrary LoadLibraryA GetVersionExA GetTimeZoneInformation SystemTimeToTzSpecificLocalTime GetExitCodeProcess OpenProcess TerminateProcess CreateProcessA SetCurrentDirectoryA GetCurrentDirectoryA FileTimeToSystemTime InterlockedDecrement CreateThread FindNextFileA FindFirstFileA CopyFileA GetSystemInfo Process32Next Process32First CreateToolhelp32Snapshot RemoveDirectoryA GetTickCount SetDllDirectoryA GetComputerNameExW CreateMutexA GetFileInformationByHandle GetCurrentProcessId GetModuleFileNameA ConnectNamedPipe CreateNamedPipeA SetFilePointer SetCurrentDirectoryW ProcessIdToSessionId GetCurrentDirectoryW FileTimeToLocalFileTime GetSystemDirectoryA GetCurrentThreadId CreateTimerQueue CreateTimerQueueTimer CreateDirectoryA FlushFileBuffers CopyFileW DisconnectNamedPipe lstrcmpW GetFileAttributesExA GetFullPathNameA GlobalFree GlobalAlloc QueryPerformanceCounter SuspendThread ResumeThread GetNativeSystemInfo LocalUnlock LocalLock MoveFileExA GlobalUnlock GlobalLock GlobalSize DeactivateActCtx ActivateActCtx GetModuleFileNameW CreateActCtxW ReleaseActCtx CompareStringW GetVersionExW GlobalDeleteAtom GlobalFindAtomW FreeResource GetLocaleInfoW GetSystemDefaultUILanguage ConvertDefaultLocale GetUserDefaultUILanguage GetCurrentThread lstrcmpA GetPrivateProfileIntW WritePrivateProfileStringW GetPrivateProfileStringW SetThreadPriority GlobalGetAtomNameW GetThreadLocale TlsGetValue GlobalReAlloc GlobalHandle TlsAlloc TlsSetValue LocalReAlloc TlsFree InterlockedIncrement GlobalFlags lstrcmpiW LockFile UnlockFile SetEndOfFile DuplicateHandle GetVolumeInformationW GetFullPathNameW GetWindowsDirectoryW GetNumberFormatW SetErrorMode GetFileAttributesExW GetFileAttributesW GetFileTime GetTempFileNameW GetTempPathW InitializeCriticalSectionAndSpinCount GetProfileIntW SearchPathW VirtualProtect GetUserDefaultLCID HeapSetInformation GetStartupInfoW MoveFileA HeapFree EncodePointer DecodePointer HeapAlloc GetCPInfo VirtualAlloc VirtualQuery ExitProcess GetSystemTimeAsFileTime RaiseException RtlUnwind HeapReAlloc GetTimeFormatA GetDateFormatA PeekNamedPipe GetFileType GetDriveTypeA FindFirstFileExA ExitThread HeapQueryInformation HeapSize SetStdHandle SetUnhandledExceptionFilter GetStdHandle FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount HeapCreate HeapDestroy UnhandledExceptionFilter IsDebuggerPresent IsProcessorFeaturePresent GetConsoleCP GetConsoleMode GetACP GetOEMCP IsValidCodePage LCMapStringW GetStringTypeW EnumSystemLocalesA IsValidLocale CreatePipe WriteConsoleW InterlockedCompareExchange

user32

MoveWindow ShowWindow WindowFromPoint GetCursorPos EndDialog GetNextDlgTabItem CreateDialogIndirectParamW GetActiveWindow InflateRect IntersectRect GetMenuItemInfoW DestroyMenu SystemParametersInfoW LoadMenuW ShowOwnedPopups MapDialogRect SetWindowContextHelpId ValidateRect TranslateMessage GetMessageW RealChildWindowFromPoint UnregisterClassW SetRectEmpty DeleteMenu SetTimer KillTimer EnumDisplayMonitors SetLayeredWindowAttributes WaitMessage DestroyIcon CharUpperW CharNextW CopyAcceleratorTableW IsRectEmpty SetRect InvalidateRgn GetNextDlgGroupItem MessageBeep GetMenuDefaultItem CreatePopupMenu GetAsyncKeyState InvertRect HideCaret EnableScrollBar NotifyWinEvent GetIconInfo CopyImage DrawIconEx TranslateAcceleratorW BringWindowToTop InsertMenuItemW LoadAcceleratorsW ReuseDDElParam UnpackDDElParam IsZoomed SetWindowRgn SetParent DestroyAcceleratorTable SetClassLongW DrawStateW DrawEdge DrawFrameControl ToUnicodeEx GetKeyboardLayout GetKeyboardState CreateAcceleratorTableW SetCursorPos LockWindowUpdate RegisterClipboardFormatW OpenClipboard SetClipboardData CloseClipboard EmptyClipboard IsCharLowerW MapVirtualKeyExW UnionRect UpdateLayeredWindow MonitorFromPoint IsMenu PostThreadMessageW DefFrameProcW DefMDIChildProcW DrawMenuBar TranslateMDISysAccel CreateMenu SetMenuDefaultItem IsClipboardFormatAvailable GetUpdateRect CopyIcon CharUpperBuffW GetDoubleClickTime SubtractRect DestroyCursor GetWindowRgn SetWindowsHookExW ScrollWindow TrackPopupMenu GetKeyState SetWindowTextW SetScrollRange GetScrollRange SetScrollPos GetScrollPos SetForegroundWindow ShowScrollBar IsWindowVisible PostMessageW CreateWindowExW GetClassInfoExW RegisterClassW AdjustWindowRectEx EqualRect DeferWindowPos GetScrollInfo SetScrollInfo PtInRect SetWindowPlacement GetWindowPlacement GetDlgCtrlID GetMenu SetWindowPos GetWindow UnhookWindowsHookEx EndPaint BeginPaint GetWindowDC ClientToScreen GrayStringW DrawTextExW DrawTextW TabbedTextOutW MapVirtualKeyW GetKeyNameTextW IsWindow GetWindowThreadProcessId GetLastActivePopup IsWindowEnabled MessageBoxW SetMenuItemBitmaps GetMenuCheckMarkDimensions GetFocus ModifyMenuW EnableMenuItem CheckMenuItem GetMenuState GetMenuStringW GetMenuItemID InsertMenuW GetMenuItemCount GetSubMenu RemoveMenu MessageBoxA wsprintfW FillRect LoadIconW PostQuitMessage GetClassInfoW GetSysColorBrush DefWindowProcW RedrawWindow GetSysColor GetSystemMenu LoadImageW DrawIcon CreateIconIndirect OffsetRect AppendMenuW GetDesktopWindow FrameRect GetSystemMetrics UpdateWindow CopyRect LoadBitmapW EnableWindow SetCursor RemovePropW ScreenToClient GetWindowRect SetCapture GetParent LoadCursorW GetClientRect SetPropW GetDC DrawFocusRect InvalidateRect GetWindowLongW ReleaseDC GetDlgItem SetWindowLongW ReleaseCapture SendMessageW GetPropW CallWindowProcW CallNextHookEx GetClassLongW GetClassNameW SetFocus GetWindowTextLengthW GetWindowTextW GetForegroundWindow SetActiveWindow DispatchMessageW BeginDeferWindowPos EndDeferWindowPos GetTopWindow IsDialogMessageW CheckDlgButton RegisterWindowMessageW SendDlgItemMessageW SendDlgItemMessageA WinHelpW IsChild SetMenu GetCapture DestroyWindow GetMessageTime GetMessagePos PeekMessageW MonitorFromWindow GetMonitorInfoW MapWindowPoints IsIconic

gdi32

PtVisible GetPixel Polygon GetWindowExtEx GetViewportExtEx RectVisible SelectClipRgn Ellipse SetLayout GetLayout ExtTextOutW Escape SetViewportOrgEx OffsetViewportOrgEx GetObjectW SetViewportExtEx ScaleViewportExtEx SetWindowOrgEx OffsetWindowOrgEx SetWindowExtEx ScaleWindowExtEx ExtSelectClipRgn CreateRectRgn SetTextAlign MoveToEx LineTo IntersectClipRect ExcludeClipRect GetClipBox SetMapMode SetROP2 SetPolyFillMode Polyline SetBkMode SetBkColor RestoreDC SaveDC PatBlt CreateRectRgnIndirect CreateBitmap CreateDCW CopyMetaFileW LPtoDP GetMapMode GetDeviceCaps GetStockObject CreateEllipticRgn CreatePolygonRgn CreateRoundRectRgn BitBlt CreatePatternBrush SelectPalette GetObjectType DeleteDC CreateDIBSection SetDIBColorTable SelectObject CreateCompatibleBitmap SetStretchBltMode TextOutW CreateSolidBrush StretchBlt CreateCompatibleDC SetTextColor CreateFontIndirectW DeleteObject CreatePen CreateHatchBrush SetRectRgn CombineRgn DPtoLP GetTextExtentPoint32W GetTextMetricsW CreateDIBitmap EnumFontFamiliesW GetTextCharsetInfo GetBkColor GetTextColor GetRgnBox CreatePalette GetPaletteEntries GetNearestPaletteIndex RealizePalette SetPixel Rectangle OffsetRgn GetTextFaceW SetPixelV SetPaletteEntries ExtFloodFill GetBoundsRect FrameRgn FillRgn PtInRegion GetViewportOrgEx GetWindowOrgEx EnumFontFamiliesExW GetSystemPaletteEntries

msimg32

TransparentBlt AlphaBlend

comdlg32

GetFileTitleW

comctl32

ImageList_GetIconSize InitCommonControlsEx _TrackMouseEvent

ole32

RevokeDragDrop CoLockObjectExternal RegisterDragDrop OleGetClipboard CoRegisterMessageFilter CoRevokeClassObject DoDragDrop OleFlushClipboard OleIsCurrentClipboard CreateStreamOnHGlobal OleLockRunning IsAccelerator OleTranslateAccelerator OleDestroyMenuDescriptor OleCreateMenuDescriptor OleInitialize CoFreeUnusedLibraries OleUninitialize CreateILockBytesOnHGlobal StgCreateDocfileOnILockBytes StgOpenStorageOnILockBytes CoGetClassObject CLSIDFromString CLSIDFromProgID CoCreateGuid OleDuplicateData CoTaskMemAlloc ReleaseStgMedium CoTaskMemFree CoInitializeEx CoInitializeSecurity CoUninitialize CoSetProxyBlanket CoInitialize CoCreateInstance

oleaut32

SystemTimeToVariantTime SysAllocStringLen SysAllocStringByteLen SysStringLen VariantTimeToSystemTime VariantCopy SafeArrayAccessData VariantChangeType VariantClear VariantInit SysAllocString SysFreeString SafeArrayGetLBound SafeArrayDestroy VarBstrFromDate OleCreateFontIndirect SafeArrayGetUBound

oledlg

OleUIBusyW

oleacc

CreateStdAccessibleObject AccessibleObjectFromWindow LresultFromObject

imm32

ImmGetContext ImmGetOpenStatus ImmReleaseContext

winmm

PlaySoundW

winspool.drv

ClosePrinter DocumentPropertiesW OpenPrinterW

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-06_5ac4292dded60634c028692a006f4054_darkgate_elex_floxif_hijackloader_mafia

PE Signature issue

setupapi

wtsapi32

wsock32

userenv

iphlpapi

winhttp

dcagenthttp

crypt32

netapi32

dclibxml2

advapi32

shlwapi

shell32

odbc32

gdiplus

kernel32

user32

gdi32

msimg32

comdlg32

comctl32

ole32

oleaut32

oledlg

oleacc

imm32

winmm

winspool.drv

generic