General

  • Target
    2026-08-04_45bb496579dedde8042cc94b76095211_darkgate_elex_floxif_mafia
  • Size 1.9MB
  • Sample260804-tetdhadc54
  • SHA256 f40ee68beb957bcf7f26c143e19d686bffc25e8b7083a0442bcf10f892cebc32
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10

Malware Config

Signatures

  • Codesign digest Mismatch 1 IoCs

    File was altered after it was signed.

File Explorer

  • 2026-08-04_45bb496579dedde8042cc94b76095211_darkgate_elex_floxif_mafia
    .exe 1.9MB

2026-08-04_45bb496579dedde8042cc94b76095211_darkgate_elex_floxif_mafia

  • IMPHASH 87c39ce6574d6e8432e5f6a0bb4f0f6e
  • SHA256 f40ee68beb957bcf7f26c143e19d686bffc25e8b7083a0442bcf10f892cebc32
  • MD5 SHA1 SHA512 SSDEEP TLSH
  • Codesign digest Mismatch

    File was altered after it was signed.

PE Signature issue

Digest
0b:3a:e9:7d:12:36:3b:31:ee:9c:18:5b:d7:56:19:6b:20:c9:a4:bd
Digest Algorithm
sha1
PE Digests Matches
Not matched
Trusted
Not trusted
Signing Certificate
CN=Autodesk\, Inc.,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Subscription,O=Autodesk\, Inc.,L=San Rafael,ST=California,C=US
Minor OS version
1
Major OS version
5
Entry point
1204886
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE
PDB paths
D:\sst\proj\cer\client\windows\develop\Win32\Release\senddmp.pdb