2026-07-06_17cb8267e21c2ba83aec25050624a0fa_amadey_darkgate_elex_glassworm_smoke-loader

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-06_17cb8267e21c2ba83aec25050624a0fa_amadey_darkgate_elex_glassworm_smoke-loader
Size 47.0MB
Sample260707-ft6eqaat91
SHA256 f123aace4ce94836d7d249a534f09772cfa998c848bd381ffcf6a0a8a6765633
MD5 17cb8267e21c2ba83aec25050624a0fa
SHA1 f4d5ba260a31de9fb194d1a37422e88f7c66c9ef
SHA512 a764679761880cb1cf34590c0c6b3fa967eaea265da0fccc0639656ec91af90b782e90acd6c130ad80724bc140e2991957c968d9dc2e7dc4ef057371c13c62cb
SSDEEP 786432:MaKS9Y5YqhoTLwPTjAGpzLHYI6EKe9VqUCeUgbgukZ14h5nm7iztyopwAO+woKBy:MaAULS8GpzLHYIwGzCeUCg914nPRhC1K
TLSH
T154B7120BB5D2A1F5F1260CB1E73F08D36726E45C0AB846EA67C4E9727C6116F2C4D1EA
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-06_17cb8267e21c2ba83aec25050624a0fa_amadey_darkgate_elex_glassworm_smoke-loader

File Explorer

2026-07-06_17cb8267e21c2ba83aec25050624a0fa_amadey_darkgate_elex_glassworm_smoke-loader

.exe 47.0MB

2026-07-06_17cb8267e21c2ba83aec25050624a0fa_amadey_darkgate_elex_glassworm_smoke-loader

IMPHASH 1bf5c146fb3db0978541297032d7c4c9
SHA256 f123aace4ce94836d7d249a534f09772cfa998c848bd381ffcf6a0a8a6765633
MD5 17cb8267e21c2ba83aec25050624a0fa
SHA1 f4d5ba260a31de9fb194d1a37422e88f7c66c9ef
SHA512 a764679761880cb1cf34590c0c6b3fa967eaea265da0fccc0639656ec91af90b782e90acd6c130ad80724bc140e2991957c968d9dc2e7dc4ef057371c13c62cb
SSDEEP 786432:MaKS9Y5YqhoTLwPTjAGpzLHYI6EKe9VqUCeUgbgukZ14h5nm7iztyopwAO+woKBy:MaAULS8GpzLHYIwGzCeUCg914nPRhC1K
TLSH
T154B7120BB5D2A1F5F1260CB1E73F08D36726E45C0AB846EA67C4E9727C6116F2C4D1EA
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

57175115

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

Name

.text

Size

Virtual Size

2.4MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

Virtual Size

1.9MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

Virtual Size

413KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

40KB

Virtual Size

36KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.svmp1

Size

Virtual Size

23.5MB

Characteristics

IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.svmp2

Size

23.2MB

Virtual Size

23.2MB

Characteristics

IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.svmp3

Size

3.9MB

Virtual Size

3.9MB

Characteristics

IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.svmp4

Size

19.8MB

Virtual Size

19.8MB

Characteristics

IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

2026-07-06_17cb8267e21c2ba83aec25050624a0fa_amadey_darkgate_elex_glassworm_smoke-loader

iphlpapi

winmm

ws2_32

kernel32

user32

gdi32

winspool.drv

advapi32

shell32

ole32

oleaut32

comctl32

comdlg32

generic