2026-07-28_44cf39103db8e4ee2b15a24ac084b3f8_darkgate_elex_floxif_mafia

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-28_44cf39103db8e4ee2b15a24ac084b3f8_darkgate_elex_floxif_mafia
Size 2.9MB
Sample260729-brbecatshs
SHA256 6200b2a4e7d3b1d2e46b51148891114fbda2b95b2de7ac9360db8a1c2f7aec50
MD5 44cf39103db8e4ee2b15a24ac084b3f8
SHA1 ba414d86cda973a6f2bfa4ec95e0598c86c173fc
SHA512 91319782e4fe51849e9e27ae2b74090c33daca8987522e0fb45f4e06ce2215fe69aaffa504e0dadbda9590c81ff6b846b0097dd46d5bf3185c8312cb9c8105d2
SSDEEP 49152:4ElLWkgOc6Dk6IsSvngeSgLqYSd+KGXmN9RaO1yKBljhhdJzcG+eP3xUnrAYFAom:4Etvfc6Dk6IsSvngeRqYSd4mN9p1yOlZ
TLSH
T1E3E5AE10FB9B8075C5632230550E63F692695E306A3562DFEA903E3C6FB05E3C67D26B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-28_44cf39103db8e4ee2b15a24ac084b3f8_darkgate_elex_floxif_mafia

File Explorer

2026-07-28_44cf39103db8e4ee2b15a24ac084b3f8_darkgate_elex_floxif_mafia

.exe 2.9MB

2026-07-28_44cf39103db8e4ee2b15a24ac084b3f8_darkgate_elex_floxif_mafia

IMPHASH 1d610c1b04cd511615228a0485487a14
SHA256 6200b2a4e7d3b1d2e46b51148891114fbda2b95b2de7ac9360db8a1c2f7aec50
MD5 44cf39103db8e4ee2b15a24ac084b3f8
SHA1 ba414d86cda973a6f2bfa4ec95e0598c86c173fc
SHA512 91319782e4fe51849e9e27ae2b74090c33daca8987522e0fb45f4e06ce2215fe69aaffa504e0dadbda9590c81ff6b846b0097dd46d5bf3185c8312cb9c8105d2
SSDEEP 49152:4ElLWkgOc6Dk6IsSvngeSgLqYSd+KGXmN9RaO1yKBljhhdJzcG+eP3xUnrAYFAom:4Etvfc6Dk6IsSvngeRqYSd4mN9p1yOlZ
TLSH
T1E3E5AE10FB9B8075C5632230550E63F692695E306A3562DFEA903E3C6FB05E3C67D26B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

2018594

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

D:\Work\SinchunjiGuman_4\Binary\SinchunjiGuman.pdb

d3d9

Direct3DCreate9

winmm

PlaySoundA timeGetTime timeEndPeriod timeBeginPeriod mmioRead mmioOpenA mmioWrite mmioCreateChunk mmioClose mmioAdvance mmioGetInfo mmioSeek mmioDescend mmioSetInfo mmioAscend

dinput

DirectInputCreateA

dsound

ord11

kernel32

InitializeCriticalSection InterlockedExchange VirtualAlloc IsProcessorFeaturePresent GetSystemInfo FindResourceW UnmapViewOfFile WideCharToMultiByte CreateFileW CreateFileMappingA MapViewOfFile OutputDebugStringA GetTempPathA GetTempFileNameA GetModuleHandleA QueryPerformanceFrequency QueryPerformanceCounter LockResource SizeofResource LoadResource FindResourceA GetFileAttributesA lstrlenA SetEvent WritePrivateProfileStringA GetVersion CopyFileA WaitCommEvent SetLocalTime GetPrivateProfileStringA GetOverlappedResult ClearCommError SetCommState GetCommState SetCommTimeouts PurgeComm SetupComm SetCommMask CreateEventA lstrcmpiA MultiByteToWideChar MoveFileA FindClose FindFirstFileA DeleteFileA SetThreadPriority GetFullPathNameA GetLocalTime TerminateProcess GetCurrentProcess GetCurrentProcessId GetCurrentThreadId GetProcAddress LoadLibraryA GetModuleFileNameA WaitForSingleObject CreateThread ExitThread SetUnhandledExceptionFilter SetEnvironmentVariableA WriteConsoleW CompareStringW LCMapStringW InterlockedDecrement InterlockedIncrement WriteFile GetLastError Sleep ResumeThread GetTickCount LeaveCriticalSection EnterCriticalSection CloseHandle ReadFile GetFileSize CreateFileA DeleteCriticalSection InitializeCriticalSectionAndSpinCount HeapAlloc GetProcessHeap HeapFree GetVersionExA MulDiv lstrlenW LocalFree FormatMessageA GlobalUnlock GlobalLock GlobalAlloc GlobalSize GlobalFree SetLastError DeactivateActCtx ActivateActCtx CompareStringA GetModuleHandleW GetModuleFileNameW ReleaseActCtx FreeLibrary LocalAlloc TlsGetValue GlobalReAlloc GlobalHandle TlsAlloc TlsSetValue LocalReAlloc TlsFree SetFilePointer FlushFileBuffers LockFile UnlockFile SetEndOfFile DuplicateHandle GetVolumeInformationA GlobalAddAtomA lstrcmpA GlobalFlags GlobalGetAtomNameA FileTimeToSystemTime lstrcmpW LoadLibraryW GlobalDeleteAtom GlobalFindAtomA FreeResource GetFileAttributesExA FileTimeToLocalFileTime GetFileSizeEx GetFileTime GetLocaleInfoA GetUserDefaultUILanguage GetCPInfo GetOEMCP GetSystemDirectoryW lstrcpyA GetACP GetCurrentDirectoryA GetWindowsDirectoryA GetNumberFormatA GetProfileIntA SearchPathA VirtualProtect GetUserDefaultLCID FindResourceExW EncodePointer DecodePointer GetSystemTimeAsFileTime UnhandledExceptionFilter IsDebuggerPresent GetCommandLineA HeapSetInformation GetStartupInfoW RtlUnwind ExitProcess RaiseException VirtualQuery HeapReAlloc HeapQueryInformation HeapSize SetStdHandle GetFileType GetTimeZoneInformation SetHandleCount GetStdHandle GetLocaleInfoW GetConsoleCP GetConsoleMode HeapCreate FreeEnvironmentStringsW GetEnvironmentStringsW IsValidCodePage GetStringTypeW EnumSystemLocalesA IsValidLocale

user32

DestroyWindow GetDlgItem EndDeferWindowPos BeginDeferWindowPos SetFocus RemovePropA GetPropA SetPropA GetClassLongA GetCapture IsChild WinHelpA SendDlgItemMessageA LoadIconW RegisterWindowMessageA CheckDlgButton IsDialogMessageA IsIconic InflateRect GetMenuItemInfoA DestroyMenu SystemParametersInfoA FillRect TabbedTextOutA DrawTextA DrawTextExA GrayStringA GetWindowDC BeginPaint EndPaint CopyImage SetRectEmpty EnumDisplayMonitors SetLayeredWindowAttributes LoadCursorW EndDialog GetNextDlgTabItem CreateDialogIndirectParamA ShowOwnedPopups DeleteMenu InvalidateRect SetTimer KillTimer IntersectRect IsRectEmpty OffsetRect IsZoomed SetWindowRgn SetParent DestroyAcceleratorTable CreatePopupMenu WindowFromPoint NotifyWinEvent GetAsyncKeyState SetClassLongA LoadMenuW GetSystemMenu MessageBeep DrawStateA DrawIconEx DrawEdge DrawFrameControl DrawFocusRect CopyAcceleratorTableA ToAsciiEx MapVirtualKeyA GetKeyboardLayout GetKeyboardState LoadAcceleratorsW CreateAcceleratorTableA SetCursorPos LockWindowUpdate GetMenuDefaultItem InvertRect GetMessageTime EnableScrollBar GetIconInfo LoadImageA GetNextDlgGroupItem TranslateAcceleratorA TrackPopupMenu LoadAcceleratorsA LoadMenuA ReuseDDElParam UnpackDDElParam DefFrameProcA DefMDIChildProcA DrawMenuBar TranslateMDISysAccel MonitorFromPoint UnionRect IsMenu CreateMenu PostThreadMessageA WaitMessage SetMenuDefaultItem IsClipboardFormatAvailable FrameRect GetUpdateRect OpenClipboard SetClipboardData CloseClipboard EmptyClipboard LoadImageW RegisterClipboardFormatA CopyIcon CharUpperBuffA GetDoubleClickTime IsCharLowerA GetKeyNameTextA MapVirtualKeyExA SubtractRect MapDialogRect DrawIcon DestroyCursor GetWindowRgn SetMenu SetScrollRange GetScrollRange SetScrollPos GetScrollPos SetForegroundWindow ShowScrollBar RedrawWindow GetClassInfoExA GetClassInfoA RegisterClassA AdjustWindowRectEx EqualRect DeferWindowPos GetScrollInfo SetScrollInfo CallWindowProcA GetMenu SetWindowLongA SetWindowPos CopyRect SetMenuItemBitmaps GetMenuCheckMarkDimensions LoadBitmapW ModifyMenuA EnableMenuItem CheckMenuItem GetWindowTextLengthA GetFocus RealChildWindowFromPoint GetMessagePos MonitorFromWindow GetMonitorInfoA MapWindowPoints ScrollWindow HideCaret GetDlgCtrlID GetClassNameA SetWindowTextA CharUpperA DestroyIcon SetWindowsHookExA CallNextHookEx GetActiveWindow GetKeyState GetCursorPos ValidateRect ClientToScreen UpdateLayeredWindow ScreenToClient PtInRect GetDC ReleaseDC SetWindowPlacement SetCursor GetMessageA GetWindowRect RegisterClassExA SetCapture GetParent LoadIconA GetClientRect SendMessageA EnumWindows TranslateMessage GetWindowPlacement GetWindowTextA SetRect CreateWindowExA PeekMessageA DefWindowProcA GetDesktopWindow IsWindow DispatchMessageA ReleaseCapture UpdateWindow LoadCursorA GetWindowThreadProcessId GetWindow BringWindowToTop SetActiveWindow GetForegroundWindow ShowWindow IsWindowVisible GetTopWindow MoveWindow ExitWindowsEx ShowCursor PostQuitMessage PostMessageA ChangeDisplaySettingsA EnumDisplaySettingsA wsprintfA MessageBoxA UnhookWindowsHookEx GetSystemMetrics GetSysColor GetSysColorBrush GetWindowLongA GetLastActivePopup IsWindowEnabled EnableWindow GetMenuState GetMenuStringA AppendMenuA GetMenuItemID InsertMenuA GetMenuItemCount GetSubMenu RemoveMenu InsertMenuItemA

gdi32

RestoreDC SetPolyFillMode SetROP2 GetClipBox ExcludeClipRect IntersectClipRect LineTo GetLayout SetLayout SelectClipRgn CreateBitmap CreateRectRgn GetViewportExtEx GetWindowExtEx GetPixel SaveDC PtVisible RectVisible TextOutA Escape SetViewportOrgEx CreateDCA CopyMetaFileA GetDeviceCaps GetTextFaceA OffsetViewportOrgEx SetViewportExtEx ScaleViewportExtEx SetWindowOrgEx OffsetWindowOrgEx SetWindowExtEx ScaleWindowExtEx BitBlt SetPixelV EnumFontFamiliesExA LPtoDP GetWindowOrgEx GetViewportOrgEx PtInRegion FillRgn FrameRgn GetBoundsRect ExtFloodFill SetPaletteEntries Rectangle SetPixel StretchBlt SetDIBColorTable GetRgnBox OffsetRgn GetSystemPaletteEntries RealizePalette GetNearestPaletteIndex GetPaletteEntries CreatePalette Polygon Ellipse Polyline CreateEllipticRgn GetTextColor GetBkColor CreatePolygonRgn CreateRoundRectRgn DPtoLP PatBlt CombineRgn SetRectRgn GetTextCharsetInfo EnumFontFamiliesA CreateRectRgnIndirect CreateCompatibleBitmap CreateDIBitmap CreateHatchBrush CreateSolidBrush CreatePen GetObjectType SelectPalette GetStockObject CreatePatternBrush ExtSelectClipRgn SelectObject DeleteObject CreateFontIndirectA GetTextExtentPoint32A CreateCompatibleDC CreateDIBSection DeleteDC GetObjectA GetObjectW GetCharacterPlacementA GetCharacterPlacementW SetTextColor SetBkColor SetBkMode GetTextMetricsA GetTextMetricsW GetFontLanguageInfo CreateFontIndirectW SetTextAlign SetMapMode ExtTextOutA MoveToEx ExtTextOutW

advapi32

RegDeleteValueA RegOpenKeyExA RegSetValueExA RegCloseKey RegQueryValueExA RegCreateKeyExA OpenProcessToken LookupPrivilegeValueA AdjustTokenPrivileges RegOpenKeyA RegDeleteKeyA RegEnumKeyExA

ole32

DoDragDrop OleGetClipboard RegisterDragDrop CoLockObjectExternal CoTaskMemFree CreateStreamOnHGlobal OleLockRunning IsAccelerator OleTranslateAccelerator OleDestroyMenuDescriptor OleCreateMenuDescriptor CoInitializeEx CoUninitialize CoCreateInstance CoInitialize OleDuplicateData CoTaskMemAlloc ReleaseStgMedium RevokeDragDrop

oleaut32

SysAllocStringLen VariantTimeToSystemTime SystemTimeToVariantTime VarBstrFromDate VariantInit VariantChangeType VariantClear SysStringLen SysFreeString SysAllocString

msimg32

AlphaBlend TransparentBlt

comctl32

ImageList_GetIconSize

shlwapi

PathStripToRootA PathFindFileNameA PathFindExtensionA PathRemoveFileSpecW PathIsUNCA

binkw32

_BinkSetVolume@12 _BinkRequestStopAsyncThread@4 _BinkWaitStopAsyncThread@4 _BinkNextFrame@4 _BinkStartAsyncThread@8 _BinkClose@4 _BinkOpen@8 _BinkOpenDirectSound@4 _BinkSetSoundSystem@8 _BinkDoFrameAsync@12 _BinkSetSoundOnOff@8 _BinkDoFrameAsyncWait@8 _BinkCopyToBuffer@28 _BinkGoto@12

oleacc

CreateStdAccessibleObject AccessibleObjectFromWindow LresultFromObject

gdiplus

GdipGetImageGraphicsContext GdipBitmapLockBits GdipCreateBitmapFromScan0 GdipCreateBitmapFromStream GdipGetImagePalette GdipGetImagePaletteSize GdipGetImagePixelFormat GdipGetImageHeight GdipGetImageWidth GdipCloneImage GdipDrawImageI GdipDrawImageRectI GdipSetInterpolationMode GdipCreateFromHDC GdiplusShutdown GdiplusStartup GdipCreateBitmapFromHBITMAP GdipDisposeImage GdipDeleteGraphics GdipAlloc GdipFree GdipBitmapUnlockBits

imm32

ImmGetContext ImmGetOpenStatus ImmReleaseContext

winspool.drv

OpenPrinterA DocumentPropertiesA ClosePrinter

comdlg32

GetFileTitleA

shell32

SHBrowseForFolderA SHAppBarMessage DragQueryFileA DragFinish SHGetDesktopFolder SHGetFileInfoA ShellExecuteA SHGetSpecialFolderLocation SHGetPathFromIDListA

generic

count=1, id=152, version=20115,

count=2, id=123, productName=VS2005 build 50727, version=50727,

count=1, id=132, productName=VS2008 SP1 build 30729, version=30729,

count=63, id=158, productName=VS2010 SP1 build 40219, version=40219,

count=212, id=170, productName=VS2010 SP1 build 40219, version=40219,

count=398, id=171, productName=VS2010 SP1 build 40219, version=40219,

count=12, id=131, productName=VS2008 SP1 build 30729, version=30729,

count=38, id=147, productName=VS2008 SP1 build 30729, version=30729,

count=2, id=28, version=9178,

count=12, id=95, version=2067,

count=6, id=18, version=8444,

count=137, id=29, version=9178,

count=7, id=25, version=9210,

count=858, id=1, productName=Unmarked objects,

count=54, id=175, version=40219,

count=1, id=154, productName=VS2010 SP1 build 40219, version=40219,

count=1, id=157, productName=VS2010 SP1 build 40219, version=40219,