Overview

overview

3

Static

static

3

2026-08-01...op.exe

windows10-2004-x64

3

2026-08-01...op.exe

windows11-ltsc_2024-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target
    2026-08-01_38cf96c197c509d95e336fb974a67150_darkgate_elex_rhadamanthys_stop
  • Size 822KB
  • Sample260801-d2k3msdn71
  • SHA256 06a9e9babaa069d8d9c81e0d471b40d35ac9f815af995a2b8d512dfa83b6a665
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10

Malware Config

Signatures

  • Untrusted Codesign Signers 1 IoCs

    Codesigned file was signed by an untrusted entity.

File Explorer

  • 2026-08-01_38cf96c197c509d95e336fb974a67150_darkgate_elex_rhadamanthys_stop
    .exe 822KB

2026-08-01_38cf96c197c509d95e336fb974a67150_darkgate_elex_rhadamanthys_stop

  • IMPHASH 96345fb54b41525f76cd0ea4368166b9
  • SHA256 06a9e9babaa069d8d9c81e0d471b40d35ac9f815af995a2b8d512dfa83b6a665
  • MD5 SHA1 SHA512 SSDEEP TLSH
windows:5windowsx86arch:x86

  • Untrusted Codesign Signers

    Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest
b7:da:95:ab:e7:83:61:7b:d4:82:d2:cb:2a:bd:8c:40:6f:af:c0:4c
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=上饶市诚佳网络科技有限公司,O=上饶市诚佳网络科技有限公司,L=上饶市,ST=江西省,C=CN,1.2.840.113549.1.9.1=#0c167368616e6772616f6b616e676765403132362e636f6d
Minor OS version
0
Major OS version
5
Entry point
447239
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE
PDB paths
D:\works\AdAnti\Release\uninst.pdb