General

  • Target
    2026-07-10_2e4b45002d746bdb7f6cbf8a6a9238b4_amadey_darkgate_elex_glassworm_mafia_smoke-loader
  • Size 1.9MB
  • Sample260710-2ty7asdy4m
  • SHA256 2f6649e129d5b8997fdb91ed1cc28853cabea51b5cf3af3a7a9ffa8915544ba3
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

File Explorer

  • 2026-07-10_2e4b45002d746bdb7f6cbf8a6a9238b4_amadey_darkgate_elex_glassworm_mafia_smoke-loader
    .exe 1.9MB

2026-07-10_2e4b45002d746bdb7f6cbf8a6a9238b4_amadey_darkgate_elex_glassworm_mafia_smoke-loader

  • IMPHASH e181afd46bcaea8a06c9e08074919017
  • SHA256 2f6649e129d5b8997fdb91ed1cc28853cabea51b5cf3af3a7a9ffa8915544ba3
  • MD5 SHA1 SHA512 SSDEEP TLSH
  • Unsigned PE

    Checks for missing Authenticode signature.

Minor OS version
1
Major OS version
5
Entry point
691062
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE
PDB paths
D:\jenkins\jobs\CLIENT_CHAN_BACKUP\workspace\uuclient\bin\version\uu_translate.pdb