2026-07-11_7380e96edfd17430d290ce656a75d37c_darkgate_elex_mafia_zxshell

General

Target
2026-07-11_7380e96edfd17430d290ce656a75d37c_darkgate_elex_mafia_zxshell
Size 576KB
Sample260711-e4ty1abw6k
SHA256 107ceab6dfe68339f3b6a0a743358dee7ca03cddeedb3471d07abddbea4362fd
MD5 7380e96edfd17430d290ce656a75d37c
SHA1 3df1bba3ce2d8027e1ab94ad495f2b112ff3fb37
SHA512 877f8f21f25ca05c05a0b2bbfe074fd0c699dca68788361aee491e2fde927cd8da5f87aab887114bb37451401401ae53bd386dae7910324b2e92f2986da726ad
SSDEEP 12288:OyCyO4P9XqeOU2cxUHtXbnwR1+1Y/qt6m8zNdgeAlDpVxl:e+9O86HtXb416Y/G6m8JdgeIpV
TLSH
T1C7C48D22F700C036D0B300708D6AA7669AFCB8745B2556C7F7DD0A6A1EA87D1A739397
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-11_7380e96edfd17430d290ce656a75d37c_darkgate_elex_mafia_zxshell

File Explorer

2026-07-11_7380e96edfd17430d290ce656a75d37c_darkgate_elex_mafia_zxshell

.exe 576KB

2026-07-11_7380e96edfd17430d290ce656a75d37c_darkgate_elex_mafia_zxshell

IMPHASH d0aa829d31a957553e148ebe253eb3c5
SHA256 107ceab6dfe68339f3b6a0a743358dee7ca03cddeedb3471d07abddbea4362fd
MD5 7380e96edfd17430d290ce656a75d37c
SHA1 3df1bba3ce2d8027e1ab94ad495f2b112ff3fb37
SHA512 877f8f21f25ca05c05a0b2bbfe074fd0c699dca68788361aee491e2fde927cd8da5f87aab887114bb37451401401ae53bd386dae7910324b2e92f2986da726ad
SSDEEP 12288:OyCyO4P9XqeOU2cxUHtXbnwR1+1Y/qt6m8zNdgeAlDpVxl:e+9O86HtXb416Y/G6m8JdgeIpV
TLSH
T1C7C48D22F700C036D0B300708D6AA7669AFCB8745B2556C7F7DD0A6A1EA87D1A739397
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

69967

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

D:\Project\LoadDllResource\Debug\LoadDllResource.pdb

Name

.textbss

Size

Virtual Size

64KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.text

Size

18KB

Virtual Size

18KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

8KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

542KB

Virtual Size

541KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

2026-07-11_7380e96edfd17430d290ce656a75d37c_darkgate_elex_mafia_zxshell

kernel32

msvcr120d

generic

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-11_7380e96edfd17430d290ce656a75d37c_darkgate_elex_mafia_zxshell

kernel32

msvcr120d

generic