General

  • Target
    2026-08-01_e7e3977689d6535ae225bbab8e0642ef_darkgate_elex_floxif_maze
  • Size 2.2MB
  • Sample260802-eelw4acq5w
  • SHA256 1df7e80850cd1b6057d11476368ea36bc7f2d099a082995c48d85fe260b158f5
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10

Malware Config

Signatures

  • Codesign digest Mismatch 1 IoCs

    File was altered after it was signed.

File Explorer

  • 2026-08-01_e7e3977689d6535ae225bbab8e0642ef_darkgate_elex_floxif_maze
    .exe 2.2MB

2026-08-01_e7e3977689d6535ae225bbab8e0642ef_darkgate_elex_floxif_maze

  • IMPHASH 710c85095e3a9902b1c25edd39c38448
  • SHA256 1df7e80850cd1b6057d11476368ea36bc7f2d099a082995c48d85fe260b158f5
  • MD5 SHA1 SHA512 SSDEEP TLSH
  • Codesign digest Mismatch

    File was altered after it was signed.

PE Signature issue

Digest
a4:e9:08:8d:4f:dd:2b:8f:e7:7a:04:05:94:0e:85:37:c2:8c:e5:fc:89:01:f3:8d:91:2d:0e:5a:94:50:63:9d
Digest Algorithm
sha256
PE Digests Matches
Not matched
Trusted
Signing Certificate
SERIALNUMBER=214911-0025950,CN=GVIX corp,O=GVIX corp,L=Geumcheon District,ST=Seoul,C=KR,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130553656f756c,1.3.6.1.4.1.311.60.2.1.3=#13024b52
Minor OS version
1
Major OS version
5
Entry point
1398958
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE
PDB paths
C:\Program Files (x86)\ExBC\ExBCSvc.pdb