2026-08-05_354ba423ead930f3e947e2b05f2d3844_amadey_darkgate_elex_glassworm_smoke-loader

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-05_354ba423ead930f3e947e2b05f2d3844_amadey_darkgate_elex_glassworm_smoke-loader
Size 50.3MB
Sample260805-pe2bwsfl71
SHA256 2b42d8913ac3f2f948129b62d7dfe0724e2d765878ef8a8cb89e732c5687cfba
MD5 354ba423ead930f3e947e2b05f2d3844
SHA1 7dcaed46bc3e1f9705f1ee7dd26670670cf4611b
SHA512 5fb4a45be930162fa122bd3f60c67e4e3cfa85d018b99741038798149dbaf72b1a0639f70eff947ed60fac8aa6fe5784872ec4e71f9e0eb0651d4ed41ac92a0d
SSDEEP 786432:dcPpj8BnVsivOA0Z5thIeuXiKwyDZb5AqUCekvgSiIxXv6zr/JqgSCNkyTDDXj/Y:CPpjwVCA0fthIeu8+t2CekvBxixT
TLSH
T1A2C7120FECA28FF2D8B76D727C0F0DAF5710AD21BB309B9711E120966EF45997998244
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-05_354ba423ead930f3e947e2b05f2d3844_amadey_darkgate_elex_glassworm_smoke-loader

File Explorer

2026-08-05_354ba423ead930f3e947e2b05f2d3844_amadey_darkgate_elex_glassworm_smoke-loader

.exe 50.3MB

2026-08-05_354ba423ead930f3e947e2b05f2d3844_amadey_darkgate_elex_glassworm_smoke-loader

IMPHASH dfdee0818ea0a3a0fa2aa53f91d3c08b
SHA256 2b42d8913ac3f2f948129b62d7dfe0724e2d765878ef8a8cb89e732c5687cfba
MD5 354ba423ead930f3e947e2b05f2d3844
SHA1 7dcaed46bc3e1f9705f1ee7dd26670670cf4611b
SHA512 5fb4a45be930162fa122bd3f60c67e4e3cfa85d018b99741038798149dbaf72b1a0639f70eff947ed60fac8aa6fe5784872ec4e71f9e0eb0651d4ed41ac92a0d
SSDEEP 786432:dcPpj8BnVsivOA0Z5thIeuXiKwyDZb5AqUCekvgSiIxXv6zr/JqgSCNkyTDDXj/Y:CPpjwVCA0fthIeu8+t2CekvBxixT
TLSH
T1A2C7120FECA28FF2D8B76D727C0F0DAF5710AD21BB309B9711E120966EF45997998244
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

63701697

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

Name

.text

Size

Virtual Size

1.6MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

Virtual Size

13.3MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

Virtual Size

577KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

3.7MB

Virtual Size

3.7MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.svmp1

Size

Virtual Size

16.5MB

Characteristics

IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.svmp2

Size

21.9MB

Virtual Size

21.9MB

Characteristics

IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.svmp3

Size

4.0MB

Virtual Size

4.0MB

Characteristics

IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.svmp4

Size

20.7MB

Virtual Size

20.7MB

Characteristics

IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

2026-08-05_354ba423ead930f3e947e2b05f2d3844_amadey_darkgate_elex_glassworm_smoke-loader

msvfw32

avifil32

winmm

ws2_32

version

kernel32

user32

gdi32

winspool.drv

comdlg32

advapi32

shell32

ole32

oleaut32

comctl32

generic