2026-08-07_233b19f126760393e0d31e192f23693c_amadey_darkgate_elex_glassworm_smoke-loader

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-07_233b19f126760393e0d31e192f23693c_amadey_darkgate_elex_glassworm_smoke-loader
Size 28.2MB
Sample260808-b5zdbsfn71
SHA256 b23b9ca0d62b1da8a3fc89fd5f9466497b93cbad269e554963f151986caaebd1
MD5 233b19f126760393e0d31e192f23693c
SHA1 149aec746148f3e82cc71c6b638a41177e223858
SHA512 55d0c367eb6c584cd73a497a47b119f012837784b862d48cb0b0c511a13678c9a097d3d38ddfa925f509914f26769944d7769ae37e13019441deb744980a7310
SSDEEP 786432:VUffIyaL6SJZ1/WPgoxTwKFSjc9XHNYRUurJ7cZ3luwkKS:inUGgAWKEc9XoUurhcBkK
TLSH
T1A257120BA1F3616DE8768EB7B92740914774F91227B098BA76C0258E3DF44573C9E23B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-07_233b19f126760393e0d31e192f23693c_amadey_darkgate_elex_glassworm_smoke-loader

File Explorer

2026-08-07_233b19f126760393e0d31e192f23693c_amadey_darkgate_elex_glassworm_smoke-loader

.exe 28.2MB

2026-08-07_233b19f126760393e0d31e192f23693c_amadey_darkgate_elex_glassworm_smoke-loader

IMPHASH 2a79056fb363a206b4989369ae01a1ee
SHA256 b23b9ca0d62b1da8a3fc89fd5f9466497b93cbad269e554963f151986caaebd1
MD5 233b19f126760393e0d31e192f23693c
SHA1 149aec746148f3e82cc71c6b638a41177e223858
SHA512 55d0c367eb6c584cd73a497a47b119f012837784b862d48cb0b0c511a13678c9a097d3d38ddfa925f509914f26769944d7769ae37e13019441deb744980a7310
SSDEEP 786432:VUffIyaL6SJZ1/WPgoxTwKFSjc9XHNYRUurJ7cZ3luwkKS:inUGgAWKEc9XoUurhcBkK
TLSH
T1A257120BA1F3616DE8768EB7B92740914774F91227B098BA76C0258E3DF44573C9E23B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

42001141

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

Name

.text

Size

Virtual Size

958KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

Virtual Size

206KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

Virtual Size

464KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

28KB

Virtual Size

24KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.svmp1

Size

Virtual Size

10.9MB

Characteristics

IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.svmp2

Size

8.9MB

Virtual Size

8.9MB

Characteristics

IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.svmp3

Size

7.2MB

Virtual Size

7.2MB

Characteristics

IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.svmp4

Size

11.3MB

Virtual Size

11.3MB

Characteristics

IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.svmp5

Size

12KB

Virtual Size

10KB

Characteristics

IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.svmp6

Size

736KB

Virtual Size

732KB

Characteristics

IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

2026-08-07_233b19f126760393e0d31e192f23693c_amadey_darkgate_elex_glassworm_smoke-loader

kernel32

user32

advapi32

shlwapi

gdi32

winmm

winspool.drv

shell32

ole32

oleaut32

comctl32

ws2_32

comdlg32

generic