2026-07-31_ced393908f0bca99cc707c47206ccda7_amadey_darkgate_elex_smoke-loader_stop

General

Target
2026-07-31_ced393908f0bca99cc707c47206ccda7_amadey_darkgate_elex_smoke-loader_stop
Size 1.9MB
Sample260731-t531maxzds
SHA256 1d2510f261213cb68aed5ccff866a836c17bdb32824d9d15103b2ebba3680d14
MD5 ced393908f0bca99cc707c47206ccda7
SHA1 2d266d7d1f4d8dbba601bce936f69084af3d5d98
SHA512 7020e566271491c7fa874e69c149346e07c2deac35c65718b2ff2ee461f241c703076b6b71bfa99a848295a1be8d31fb9303bbe9e3fc946fc6634a76faf7c877
SSDEEP 12288:t3A+JqJIP2QIcuzkB/X/2xlsxjbN3FFcSRPPbYNtGDN:t3nqJYdIcuzKPgssStPUvg
TLSH
T18695D60326E49726E0FE2A7079F482775DE2BDE15D37885E33817EAE4876E4097D1322
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-31_ced393908f0bca99cc707c47206ccda7_amadey_darkgate_elex_smoke-loader_stop

2026-07-31_ced393908f0bca99cc707c47206ccda7_amadey_darkgate_elex_smoke-loader_stop

.exe 1.9MB

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 1d2510f261213cb68aed5ccff866a836c17bdb32824d9d15103b2ebba3680d14
MD5 ced393908f0bca99cc707c47206ccda7
SHA1 2d266d7d1f4d8dbba601bce936f69084af3d5d98
SHA512 7020e566271491c7fa874e69c149346e07c2deac35c65718b2ff2ee461f241c703076b6b71bfa99a848295a1be8d31fb9303bbe9e3fc946fc6634a76faf7c877
SSDEEP 12288:t3A+JqJIP2QIcuzkB/X/2xlsxjbN3FFcSRPPbYNtGDN:t3nqJYdIcuzKPgssStPUvg
TLSH
T18695D60326E49726E0FE2A7079F482775DE2BDE15D37885E33817EAE4876E4097D1322
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

4

Entry point

138990

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

WsatConfig.pdb