2026-07-14_6942694d855d937941f903a7b8f8380c_darkgate_elex_maze

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-14_6942694d855d937941f903a7b8f8380c_darkgate_elex_maze
Size 8.2MB
Sample260715-a4pbasbs2x
SHA256 13dcb8fdf8678ea0fb763f2986eff6ae2e428cbb3f68fa2dcdec6f92cbb2f549
MD5 6942694d855d937941f903a7b8f8380c
SHA1 589ef645e6afd599c88b32498346f390be268476
SHA512 ebae40480326646a314f2090d7abcc0bf4dac2f50d47d2becde7db9b138733cc9ab378bbda2db40ece18ab1e6712b7a84233e06ffea602b0249eddf64a511056
SSDEEP 98304:ZtkZtSvCe98Af56FFEeJILRFJ0auTgkPAkIHfbH/W8:ILY6FfeLR30F
TLSH
T1D08629147BA2C136D89D117C868E7A8F10AC4630B3AA47E7AE90252F6DF4BD34935F17
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-14_6942694d855d937941f903a7b8f8380c_darkgate_elex_maze

File Explorer

2026-07-14_6942694d855d937941f903a7b8f8380c_darkgate_elex_maze

.exe 8.2MB

2026-07-14_6942694d855d937941f903a7b8f8380c_darkgate_elex_maze

IMPHASH 241abfa82b42545b55134dae92ba5b3f
SHA256 13dcb8fdf8678ea0fb763f2986eff6ae2e428cbb3f68fa2dcdec6f92cbb2f549
MD5 6942694d855d937941f903a7b8f8380c
SHA1 589ef645e6afd599c88b32498346f390be268476
SHA512 ebae40480326646a314f2090d7abcc0bf4dac2f50d47d2becde7db9b138733cc9ab378bbda2db40ece18ab1e6712b7a84233e06ffea602b0249eddf64a511056
SSDEEP 98304:ZtkZtSvCe98Af56FFEeJILRFJ0auTgkPAkIHfbH/W8:ILY6FfeLR30F
TLSH
T1D08629147BA2C136D89D117C868E7A8F10AC4630B3AA47E7AE90252F6DF4BD34935F17
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

3142987

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

VirtualQuery LoadLibraryExW lstrcmpiW IsBadWritePtr GetTempFileNameW MoveFileA lstrcmpiA SetFilePointer FreeResource CompareStringA GetFullPathNameA InterlockedCompareExchange InitializeCriticalSection InterlockedExchange FindResourceA UnmapViewOfFile CreateFileMappingA GetFileSize MapViewOfFile GetModuleHandleA LoadLibraryA GetTempPathA GetTempFileNameA CreateFileA DeleteFileA OutputDebugStringA GetVersionExA lstrlenA VirtualFree VirtualAlloc InterlockedPushEntrySList InterlockedPopEntrySList InitializeSListHead GetModuleHandleW WriteConsoleW SetStdHandle FlushFileBuffers SetFilePointerEx GetConsoleCP ReadConsoleW GetConsoleMode FreeEnvironmentStringsW GetEnvironmentStringsW SizeofResource SetCurrentDirectoryW HeapReAlloc GlobalHandle InterlockedIncrement FindResourceW LockResource LoadResource GlobalFree InterlockedDecrement GetDriveTypeW SetErrorMode HeapFree GlobalMemoryStatus GetVersionExW GetTimeZoneInformation GetLocaleInfoW GetSystemDirectoryW GetProcessHeap HeapAlloc FreeLibrary GetProcAddress LoadLibraryW SetLastError Sleep GlobalUnlock GlobalLock MulDiv lstrcmpW GetCurrentProcess FlushInstructionCache GetCurrentThreadId GetModuleFileNameW DecodePointer DeleteCriticalSection LeaveCriticalSection EnterCriticalSection GetCurrentProcessId QueryPerformanceCounter GetFileType LCMapStringW GetStringTypeW EnumSystemLocalesW GetUserDefaultLCID IsValidLocale GetCPInfo GetOEMCP IsValidCodePage WriteFile GetStdHandle GetStartupInfoW TlsFree TlsSetValue TlsGetValue TlsAlloc TerminateProcess SetUnhandledExceptionFilter UnhandledExceptionFilter HeapSize AreFileApisANSI GetModuleHandleExW ReadFile RtlUnwind GetCommandLineW GetACP GetSystemTimeAsFileTime IsProcessorFeaturePresent IsDebuggerPresent EncodePointer OutputDebugStringW InitializeCriticalSectionAndSpinCount GetLastError RaiseException MultiByteToWideChar GlobalAlloc ExitThread GetTickCount ExitProcess LocalFree FormatMessageW FindClose FindNextFileW FindFirstFileW GetFullPathNameW CreateProcessW DeleteFileW MoveFileW CopyFileW CreateFileW SetEndOfFile GetLocalTime SetFileAttributesW WideCharToMultiByte GetSystemInfo CreateSemaphoreW CloseHandle WaitForSingleObject ReleaseSemaphore CreateThread GetFileAttributesW

user32

SetCursorPos SetTimer EnumDisplaySettingsExW ReleaseDC InvalidateRect GetDC GetFocus FillRect BeginPaint EndPaint GetSystemMetrics ClientToScreen ScreenToClient GetAsyncKeyState CharNextW UnregisterClassW SetWindowLongW GetWindowLongW CreateWindowExW DestroyWindow SetWindowTextW GetWindowTextW GetWindowTextLengthW GetClientRect SendMessageW ValidateRect LoadImageW UnhookWindowsHookEx SetWindowsHookExW CallNextHookEx SetDlgItemTextW SetCursor GetCursor CreateIconIndirect DestroyIcon FindWindowW DialogBoxIndirectParamW GetMessageW PeekMessageW IsIconic EnumDisplayDevicesW GetWindowPlacement GetCursorPos GetActiveWindow AdjustWindowRect EndDialog ChangeDisplaySettingsExW CallWindowProcW RegisterWindowMessageW DefWindowProcW ReleaseCapture CreateAcceleratorTableW GetDesktopWindow DestroyAcceleratorTable GetSysColor RegisterClassExW LoadCursorW GetClassInfoExW GetClassNameW IsWindow GetDlgItem GetParent IsChild GetWindow SetFocus SetCapture GetKeyState MessageBoxW WaitForInputIdle OpenClipboard EmptyClipboard SetClipboardData CloseClipboard GetWindowRect IsDialogMessageW TranslateMessage DispatchMessageW LoadIconW AdjustWindowRectEx GetPropW SetPropW RemovePropW PostQuitMessage SetActiveWindow IsWindowEnabled SetClassLongW GetMenu SetMenu PostMessageW UpdateWindow MonitorFromPoint GetMonitorInfoW SystemParametersInfoW CreateDialogParamW CreateDialogIndirectParamW DialogBoxParamW ShowScrollBar CreateMenu DestroyMenu GetMenuItemCount InsertMenuItemW RemoveMenu CheckMenuItem GetMenuState CreatePopupMenu TrackPopupMenu EnableWindow RedrawWindow ShowWindow InvalidateRgn SetWindowPos MoveWindow

gdi32

GetDeviceCaps TextOutW SetTextColor BitBlt CreateSolidBrush CreateCompatibleDC CreateFontIndirectW SelectObject CreateFontW DeleteObject CreateCompatibleBitmap GetStockObject GetTextMetricsW EnumFontFamiliesExW GetTextExtentPoint32W GdiFlush CreateDIBSection SetStretchBltMode StretchBlt CreateBitmap GetObjectW SetBkMode AddFontMemResourceEx AddFontResourceExW DeleteDC ExtTextOutW MoveToEx ExtTextOutA SetMapMode SetTextAlign CreateFontIndirectA GetFontLanguageInfo SetBkColor GetCharacterPlacementW GetCharacterPlacementA GetGlyphOutlineA GetTextMetricsA GetObjectA GetGlyphOutlineW

advapi32

RegCreateKeyExW RegQueryValueExA GetUserNameA RegQueryValueExW CryptAcquireContextW CryptCreateHash RegQueryInfoKeyW RegSetValueExW RegEnumKeyExW RegCloseKey RegDeleteValueW RegDeleteKeyW CryptHashData RegOpenKeyExW CryptReleaseContext CryptDestroyHash CryptDestroyKey CryptEncrypt CryptDeriveKey RegOpenKeyA

shell32

SHGetSpecialFolderPathW SHCreateDirectoryExW SHGetFolderPathW DragFinish DragQueryFileW ShellExecuteExW

ole32

CoTaskMemRealloc CoUninitialize CoInitialize CoSetProxyBlanket OleUninitialize OleInitialize OleLockRunning CoGetClassObject CLSIDFromProgID CreateStreamOnHGlobal CLSIDFromString CoTaskMemFree CoCreateInstance StringFromGUID2 CoTaskMemAlloc

oleaut32

SysAllocStringLen SysFreeString SysAllocString SysStringLen VariantInit VariantClear LoadTypeLi LoadRegTypeLi OleCreateFontIndirect VariantCopy VariantChangeType DispCallFunc VarUI4FromStr

winmm

mmioSetInfo mmioGetInfo mmioClose mmioSeek timeGetTime mciSendStringW mciGetErrorStringW timeGetDevCaps timeBeginPeriod timeEndPeriod mmioAscend mmioRead mmioDescend mmioOpenW mmioAdvance

comctl32

CreateStatusWindowW InitCommonControlsEx

dsound

ord3 ord1

wininet

InternetCloseHandle InternetReadFile HttpQueryInfoW HttpSendRequestW HttpOpenRequestW InternetConnectW InternetOpenW

version

VerQueryValueW GetFileVersionInfoW GetFileVersionInfoSizeW

imm32

ImmAssociateContext

d3d9

Direct3DCreate9

comdlg32

GetOpenFileNameW GetSaveFileNameW

ws2_32

WSACleanup closesocket

Name

.text

Size

5.9MB

Virtual Size

5.9MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

645KB

Virtual Size

645KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

181KB

Virtual Size

67.4MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

_RDATA

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

1.2MB

Virtual Size

1.2MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

252KB

Virtual Size

252KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

generic

count=15, id=95, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,

count=6, id=15, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,

count=154, id=96, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,

count=2, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,

count=9, id=225, version=20806,

count=1, id=199, version=41118,

count=84, id=223, productName=VS2013 build 21005, version=21005,

count=1, id=224, productName=VS2013 UPD5 build 40629, version=40629,

count=2, id=19, version=8034,

count=40, id=225, productName=VS2013 UPD3 build 30723, version=30723,

count=85, id=225, productName=VS2013 build 21005, version=21005,

count=249, id=224, productName=VS2013 build 21005, version=21005,

count=7, id=131, productName=VS2008 SP1 build 30729, version=30729,

count=33, id=147, productName=VS2008 SP1 build 30729, version=30729,

count=434, id=1, productName=Unmarked objects,

count=411, id=229, version=40629,

count=1, id=219, productName=VS2013 build 21005, version=21005,

count=1, id=151,

count=1, id=222, productName=VS2013 UPD5 build 40629, version=40629,