2026-08-10_84405f3b64d84c6fc9c9b68894e21f08_amadey_darkgate_elex_maze_smoke-loader

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-10_84405f3b64d84c6fc9c9b68894e21f08_amadey_darkgate_elex_maze_smoke-loader
Size 6.8MB
Sample260810-smfa6sbr2t
SHA256 a4fe1295dcf057bb8c5d754212ee9ba48b5945f62533136394f51c16a6be07fc
MD5 84405f3b64d84c6fc9c9b68894e21f08
SHA1 041d0ef783e527bde80c932b39c7d30d447e8c59
SHA512 06062474c8e6661ac9adca21dff947dc6191f9beb26a7db806ed6d14beda97c9db5d29d751a59f43ab277f79e0ad8f4578e9096352dd8d97e126fea7da5b04ac
SSDEEP 196608:E41RxWAsTg2PQTWoe3xr+Qu4SXYqmjApjm:5RxWrTg2PQT/e3xrxuT/jm
TLSH
T15A660122B380D052E45740B27629ABA800BC7FB45465684BFF5CBB1E7FB47D2E925B07
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-10_84405f3b64d84c6fc9c9b68894e21f08_amadey_darkgate_elex_maze_smoke-loader

File Explorer

2026-08-10_84405f3b64d84c6fc9c9b68894e21f08_amadey_darkgate_elex_maze_smoke-loader

.exe 6.8MB

2026-08-10_84405f3b64d84c6fc9c9b68894e21f08_amadey_darkgate_elex_maze_smoke-loader

IMPHASH c6fa8c7014a9aed8074f7a67aba5e728
SHA256 a4fe1295dcf057bb8c5d754212ee9ba48b5945f62533136394f51c16a6be07fc
MD5 84405f3b64d84c6fc9c9b68894e21f08
SHA1 041d0ef783e527bde80c932b39c7d30d447e8c59
SHA512 06062474c8e6661ac9adca21dff947dc6191f9beb26a7db806ed6d14beda97c9db5d29d751a59f43ab277f79e0ad8f4578e9096352dd8d97e126fea7da5b04ac
SSDEEP 196608:E41RxWAsTg2PQTWoe3xr+Qu4SXYqmjApjm:5RxWrTg2PQT/e3xrxuT/jm
TLSH
T15A660122B380D052E45740B27629ABA800BC7FB45465684BFF5CBB1E7FB47D2E925B07
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

296339

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetCommBreak GetPrivateProfileStringW GetCommandLineA SizeofResource HeapDestroy LeaveCriticalSection lstrcpynW MulDiv WritePrivateProfileStringW GetThreadLocale ResetEvent CreateFileMappingA GetExitCodeThread DeviceIoControl CreatePipe GlobalLock GetOEMCP FindNextFileA GetVersion CreateThread SwitchToThread CloseHandle WriteConsoleW SetFilePointerEx SetStdHandle GetConsoleMode GetConsoleCP FlushFileBuffers GetStringTypeW OutputDebugStringW QueryPerformanceCounter SetEnvironmentVariableW InitializeSListHead SystemTimeToTzSpecificLocalTime FreeLibrary FindResourceW SetErrorMode UnmapViewOfFile GetLocaleInfoA CreateFileA GlobalMemoryStatus EnumResourceNamesW GetModuleFileNameA GetDateFormatW EncodePointer DecodePointer GetCommandLineW RaiseException RtlUnwind IsProcessorFeaturePresent GetLastError ExitProcess GetModuleHandleExW GetProcAddress MultiByteToWideChar WideCharToMultiByte HeapSize HeapFree HeapAlloc SetLastError GetCurrentThreadId GetProcessHeap GetStdHandle GetFileType DeleteCriticalSection GetStartupInfoW GetModuleFileNameW WriteFile GetCurrentProcessId GetSystemTimeAsFileTime GetEnvironmentStringsW FreeEnvironmentStringsW UnhandledExceptionFilter SetUnhandledExceptionFilter InitializeCriticalSectionAndSpinCount Sleep GetCurrentProcess TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetModuleHandleW IsDebuggerPresent EnterCriticalSection LoadLibraryExW IsValidCodePage GetACP GetCPInfo HeapReAlloc LCMapStringW CreateFileW

user32

IsIconic DrawIconEx GetDC GetDesktopWindow ValidateRgn CheckMenuItem CopyRect GetWindowLongW

gdi32

GetTextExtentPoint32W CreateHatchBrush PtInRegion CombineRgn StretchDIBits GetObjectW SetROP2 SetWinMetaFileBits CreateEnhMetaFileW Arc

advapi32

RegOpenKeyExW RegSetValueExW

oleaut32

SafeArrayCreate

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-10_84405f3b64d84c6fc9c9b68894e21f08_amadey_darkgate_elex_maze_smoke-loader

kernel32

user32

gdi32

advapi32

oleaut32

generic