General

  • Target
    2026-08-13_af8f83df1382bc0cfa69eeaaf004f4c8_darkgate_elex_floxif_mafia
  • Size 1.9MB
  • Sample260813-scqddssejc
  • SHA256 b26e3ead68e7b05878317aa62218d4f5ea889d0eef39c33e1fd50cd216fee274
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10

Malware Config

Signatures

  • Codesign digest Mismatch 1 IoCs

    File was altered after it was signed.

File Explorer

  • 2026-08-13_af8f83df1382bc0cfa69eeaaf004f4c8_darkgate_elex_floxif_mafia
    .exe 1.9MB

2026-08-13_af8f83df1382bc0cfa69eeaaf004f4c8_darkgate_elex_floxif_mafia

  • IMPHASH 87c39ce6574d6e8432e5f6a0bb4f0f6e
  • SHA256 b26e3ead68e7b05878317aa62218d4f5ea889d0eef39c33e1fd50cd216fee274
  • MD5 SHA1 SHA512 SSDEEP TLSH
  • Codesign digest Mismatch

    File was altered after it was signed.

PE Signature issue

Digest
9a:1c:8b:88:c7:21:59:f1:47:fc:3c:d6:d7:c1:76:af:04:fa:94:d9
Digest Algorithm
sha1
PE Digests Matches
Not matched
Trusted
Not trusted
Signing Certificate
CN=Autodesk\, Inc.,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Subscription,O=Autodesk\, Inc.,L=San Rafael,ST=California,C=US
Minor OS version
1
Major OS version
5
Entry point
1204886
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE
PDB paths
D:\sst\proj\cer\client\windows\develop\Win32\Release\senddmp.pdb