2026-08-14_0655125429531f034b4d35764314ce2c_amadey_darkgate_elex_rhadamanthys_smoke-loader_stealc_stop_virut

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-14_0655125429531f034b4d35764314ce2c_amadey_darkgate_elex_rhadamanthys_smoke-loader_stealc_stop_virut
Size 1.1MB
Sample260814-2amddstwft
SHA256 4d95f605ca53e28a2541eda7ae5cca95fdf7864e5db8c32b1d059b722d46d7fb
MD5 0655125429531f034b4d35764314ce2c
SHA1 608b1cbb7752fd87b62546dddf8e46eb4c5cb02e
SHA512 18d2e04bae04b57355637f0500b18b187fb254e043e272022e5ffb0e1c894a32ade5b8def5817596839af70c77e8e19417edd5f2f71810f9c2074226c4782421
SSDEEP 24576:dGocUhB81SKcQ7b1ew6SNRbPyqzmJZ1a54WHIwE/rblY:EoxD81SKcQ7b15Fb3zmJZ0ZHIf/C
TLSH
T12D45AE1135B1C43FE1731271892A8774AAFEFC604839562763D17B3E6E74A438D1AB2B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

Malware Config

Signatures

Codesign digest Mismatch 1 IoCs

File was altered after it was signed.

resource
2026-08-14_0655125429531f034b4d35764314ce2c_amadey_darkgate_elex_rhadamanthys_smoke-loader_stealc_stop_virut

File Explorer

2026-08-14_0655125429531f034b4d35764314ce2c_amadey_darkgate_elex_rhadamanthys_smoke-loader_stealc_stop_virut

.exe 1.1MB

2026-08-14_0655125429531f034b4d35764314ce2c_amadey_darkgate_elex_rhadamanthys_smoke-loader_stealc_stop_virut

IMPHASH faf7a8a07c3aaed6db1115fd3c3e89e4
SHA256 4d95f605ca53e28a2541eda7ae5cca95fdf7864e5db8c32b1d059b722d46d7fb
MD5 0655125429531f034b4d35764314ce2c
SHA1 608b1cbb7752fd87b62546dddf8e46eb4c5cb02e
SHA512 18d2e04bae04b57355637f0500b18b187fb254e043e272022e5ffb0e1c894a32ade5b8def5817596839af70c77e8e19417edd5f2f71810f9c2074226c4782421
SSDEEP 24576:dGocUhB81SKcQ7b1ew6SNRbPyqzmJZ1a54WHIwE/rblY:EoxD81SKcQ7b15Fb3zmJZ0ZHIf/C
TLSH
T12D45AE1135B1C43FE1731271892A8774AAFEFC604839562763D17B3E6E74A438D1AB2B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Codesign digest Mismatch

File was altered after it was signed.

PE Signature issue

Digest

e0:3c:d2:1c:e9:9d:bf:0b:8b:36:b2:bb:50:bf:da:69:b5:ec:3d:a7

Digest Algorithm

sha1

PE Digests Matches

Not matched

Trusted

Not trusted

Signing Certificate

CN=Canon Inc.,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Inkjet System Development Center,O=Canon Inc.,L=Kawasaki-shi,ST=Kanagawa,C=JP

Chains

Mar 24, 2014

CN=Canon Inc.,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Inkjet System Development Center,O=Canon Inc.,L=Kawasaki-shi,ST=Kanagawa,C=JP

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Serial Number

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 21, 2012 - Dec 30, 2020

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Serial Number

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 18, 2012 - Dec 29, 2020

Subject

Serial Number

25:0c:e8:e0:30:61:2e:9f:2b:89:f7:05:4d:7c:f8:fd

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageServerAuth, ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning, ExtKeyUsageNetscapeServerGatedCrypto

Timespan

Nov 8, 2006 - Nov 7, 2021

Subject

CN=Canon Inc.,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Inkjet System Development Center,O=Canon Inc.,L=Kawasaki-shi,ST=Kanagawa,C=JP

Serial Number

2e:f6:ae:3d:90:68:e2:3f:0d:7e:17:58:5b:e8:ca:4e

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Mar 6, 2013 - Apr 17, 2014

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Serial Number

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 8, 2010 - Feb 7, 2020

Minor OS version

Major OS version

Entry point

1214199

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

setupapi

SetupDiGetDeviceInstanceIdW SetupDiOpenDeviceInfoW SetupDiSetSelectedDevice SetupDiDestroyDeviceInfoList CM_Get_DevNode_Status SetupCopyOEMInfW SetupInitDefaultQueueCallbackEx SetupOpenFileQueue SetupInstallFilesFromInfSectionW SetupCommitFileQueueW SetupIterateCabinetW SetupCloseFileQueue SetupTermDefaultQueueCallback SetupInstallFromInfSectionW SetupDiGetSelectedDriverW SetupDiCallClassInstaller SetupDiRemoveDevice SetupDefaultQueueCallbackW SetupDiGetINFClassW SetupDiCreateDeviceInfoList SetupDiCreateDeviceInfoW SetupDiEnumDriverInfoW SetupDiGetDriverInfoDetailW SetupDiDestroyDriverInfoList SetupDiDeleteDeviceInfo SetupDiGetActualSectionToInstallW SetupDiGetDriverInstallParamsW SetupDiGetDeviceInstallParamsW SetupDiSetDeviceInstallParamsW SetupDiBuildDriverInfoList SetupDiSelectBestCompatDrv SetupDiSetDeviceRegistryPropertyW SetupSetDirectoryIdW SetupDiGetDeviceRegistryPropertyW SetupOpenInfFileW SetupGetTargetPathW SetupCloseInfFile SetupDiClassGuidsFromNameW SetupDiGetClassDevsW SetupDiOpenDevRegKey SetupDiEnumDeviceInfo SetupDiSetClassInstallParamsW

mscms

GetColorDirectoryW AssociateColorProfileWithDeviceW InstallColorProfileW

psapi

EnumProcesses EnumProcessModules GetModuleBaseNameW

rpcrt4

UuidToStringW UuidCreate RpcStringFreeW

kernel32

GetTickCount TerminateThread SetErrorMode ResumeThread GetCurrentThread ProcessIdToSessionId OpenProcess SetEvent InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection CreateEventW GetCurrentThreadId ResetEvent GetThreadLocale ExpandEnvironmentStringsW MulDiv WideCharToMultiByte MultiByteToWideChar lstrlenW GetSystemInfo GetCommandLineW InterlockedDecrement GetModuleHandleA GetCurrentProcessId FreeResource GetVersionExA lstrcmpW GlobalDeleteAtom GlobalFindAtomW GlobalAddAtomW GetVersionExW SetFilePointer FlushFileBuffers LockFile UnlockFile SetEndOfFile GetFileSize DuplicateHandle GetVolumeInformationW GetFullPathNameW InterlockedExchange CompareStringA LoadLibraryExW lstrcmpA EnumResourceLanguagesW ConvertDefaultLocale SuspendThread LocalAlloc TlsGetValue GlobalReAlloc GlobalHandle TlsAlloc TlsSetValue LocalReAlloc TlsFree InterlockedIncrement GlobalFlags lstrlenA GetFileSizeEx GetStartupInfoW RaiseException RtlUnwind TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent ExitProcess ExitThread CreateThread HeapSize GetModuleFileNameA FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType GetStartupInfoA HeapCreate VirtualFree QueryPerformanceCounter GetSystemTimeAsFileTime GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage GetTimeZoneInformation LCMapStringA LCMapStringW InitializeCriticalSectionAndSpinCount VirtualAlloc SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW GetStringTypeA GetStringTypeW GetLocaleInfoA GetCurrentDirectoryA GetDriveTypeA CreateFileA SetEnvironmentVariableA HeapReAlloc DeviceIoControl HeapFree GetProcessHeap HeapAlloc GetSystemDefaultLangID GetUserDefaultLCID GetSystemDefaultLCID GetUserDefaultLangID GetLocaleInfoW SetThreadLocale CreateMutexW OpenMutexW ReleaseMutex GetUserDefaultUILanguage MoveFileExW CreateProcessW WaitForSingleObject GetExitCodeProcess FileTimeToLocalFileTime GetPrivateProfileSectionNamesW WritePrivateProfileStringW GetPrivateProfileSectionW CompareStringW WinExec GetLocalTime OutputDebugStringW GetPrivateProfileIntW GetStdHandle WriteFile FreeConsole Sleep lstrcmpiW GetShortPathNameW GetTempPathW GetTempFileNameW GetPrivateProfileStringW GetModuleFileNameW FileTimeToSystemTime GetWindowsDirectoryW FindFirstFileW CopyFileW FindNextFileW FindClose SetFileAttributesW DeleteFileW RemoveDirectoryW SystemTimeToFileTime GlobalAlloc GlobalLock GlobalUnlock GlobalFree GetDiskFreeSpaceExW CreateDirectoryW GetLastError FormatMessageW LocalFree GetCurrentProcess CreateFileW GetFileTime CloseHandle FindResourceW LoadResource LockResource SizeofResource GetFileAttributesW LoadLibraryA SetLastError GetSystemDirectoryW GetCurrentDirectoryW SetCurrentDirectoryW LoadLibraryW GetModuleHandleW GetSystemTime GetProcAddress FreeLibrary ReadFile

user32

SetCursor GetCursorPos ValidateRect PostQuitMessage CharUpperW DestroyMenu IsDialogMessageW SetDlgItemTextW CheckRadioButton RegisterWindowMessageW SendDlgItemMessageW SendDlgItemMessageA WinHelpW GetCapture SetWindowsHookExW CallNextHookEx GetClassLongW SetPropW GetPropW RemovePropW SetFocus GetWindowTextLengthW GetForegroundWindow GetTopWindow GetMessageTime GetMessagePos GetKeyState SetMenu IsWindowVisible GetClassInfoExW GetClassInfoW RegisterClassW AdjustWindowRectEx GetDlgCtrlID CallWindowProcW PtInRect GetMenu SystemParametersInfoA GetWindowPlacement CopyRect GetActiveWindow SetActiveWindow CreateDialogIndirectParamW GetNextDlgTabItem GetWindowThreadProcessId GetLastActivePopup IsWindowEnabled SetMenuItemBitmaps GetMenuCheckMarkDimensions GetFocus ModifyMenuW CheckMenuItem GrayStringW DrawTextExW TabbedTextOutW UnhookWindowsHookEx GetMenuState GetMenuItemCount GetSubMenu UpdateWindow GetClassNameW GetSystemMetrics GetWindow MonitorFromWindow GetMonitorInfoW MapWindowPoints RedrawWindow BringWindowToTop PostMessageW WaitForInputIdle PostThreadMessageW SetTimer GetMessageW KillTimer SetWindowPos LoadStringW CreateWindowExW UnregisterClassW DefWindowProcW LoadIconW LoadCursorW RegisterClassExW GetSysColor EnableWindow SetForegroundWindow GetParent EndPaint BeginPaint GetWindowRect GetSystemMenu EnableMenuItem LoadBitmapW GetSysColorBrush GetAsyncKeyState DialogBoxParamW IsIconic CreateDialogParamW GetWindowLongW SetWindowLongW DestroyWindow EndDialog FindWindowW IsWindow MessageBoxW SendMessageW GetDlgItem GetDC GetClientRect ShowWindow DrawTextW SetWindowTextW GetWindowTextW PeekMessageW TranslateMessage DispatchMessageW GetDesktopWindow GetWindowDC ReleaseDC ScreenToClient ClientToScreen ExitWindowsEx GetMenuItemID

gdi32

PtVisible RectVisible TextOutW ExtTextOutW Escape SetViewportOrgEx OffsetViewportOrgEx ScaleViewportExtEx GetClipBox SetMapMode SetTextColor SetBkMode SetBkColor RestoreDC SaveDC SelectPalette GetStockObject CreateSolidBrush BitBlt CreateCompatibleDC CreateCompatibleBitmap SetStretchBltMode SetBrushOrgEx StretchDIBits RealizePalette CreatePalette GetObjectW CreateFontIndirectW SelectObject DeleteObject SetViewportExtEx CreateBitmap DeleteDC ScaleWindowExtEx SetWindowExtEx GetDeviceCaps

msimg32

TransparentBlt

comdlg32

GetFileTitleW

winspool.drv

GetPrinterDriverDirectoryW GetPrintProcessorDirectoryW ord203 EnumPrintersW ClosePrinter SetPrinterW GetPrinterW OpenPrinterW EnumPrinterDriversW EnumPortsW EnumMonitorsW DocumentPropertiesW

advapi32

DuplicateTokenEx LookupPrivilegeValueW RegQueryValueW RegOpenKeyW RegLoadKeyW RegUnLoadKeyW RegDeleteValueW RegDeleteKeyW RegCreateKeyExW RegCreateKeyW RegEnumKeyW GetUserNameW ImpersonateLoggedOnUser RevertToSelf AdjustTokenPrivileges IsTokenRestricted OpenThreadToken GetTokenInformation AllocateAndInitializeSid EqualSid FreeSid OpenSCManagerW OpenServiceW CloseServiceHandle QueryServiceConfigW QueryServiceStatus RegQueryValueExW RegOpenKeyExW RegSetValueExW RegCloseKey OpenProcessToken

shell32

ord51 CommandLineToArgvW SHGetFolderPathW

comctl32

InitCommonControlsEx

shlwapi

PathQuoteSpacesW PathAddBackslashW PathCanonicalizeW PathFindExtensionW PathUnquoteSpacesW PathRemoveArgsW PathGetArgsW StrToIntW PathStripToRootW PathIsUNCW PathFindFileNameW PathIsRelativeW

ole32

CoInitialize CoCreateInstance CoUninitialize CoTaskMemFree

oleaut32

VariantInit VariantChangeType VariantClear

lz32

LZCopy LZClose LZOpenFileW

version

GetFileVersionInfoSizeW GetFileVersionInfoW VerQueryValueW

??0CDeviceInf@@QAE@ABV0@@Z ??0CDeviceInf@@QAE@XZ ??0CDeviceInfSection@@QAE@ABV0@@Z ??0CDeviceInfSection@@QAE@XZ ??0CImageDriverInf@@QAE@ABV0@@Z ??0CImageDriverInf@@QAE@XZ ??0CIniSections@@QAE@ABV0@@Z ??0CIniSections@@QAE@XZ ??0CManufacturers@@QAE@ABV0@@Z ??0CManufacturers@@QAE@XZ ??0CPrinterDriverInf@@QAE@ABV0@@Z ??0CPrinterDriverInf@@QAE@XZ ??1CDeviceInf@@UAE@XZ ??1CDeviceInfSection@@UAE@XZ ??1CImageDriverInf@@UAE@XZ ??1CIniSections@@UAE@XZ ??1CManufacturers@@UAE@XZ ??1CPrinterDriverInf@@UAE@XZ ??4CDeviceInf@@QAEAAV0@ABV0@@Z ??4CDeviceInfSection@@QAEAAV0@ABV0@@Z ??4CImageDriverInf@@QAEAAV0@ABV0@@Z ??4CIniSections@@QAEAAV0@ABV0@@Z ??4CManufacturers@@QAEAAV0@ABV0@@Z ??4CPrinterDriverInf@@QAEAAV0@ABV0@@Z ??_7CDeviceInf@@6B@ ??_7CDeviceInfSection@@6B@ ??_7CImageDriverInf@@6B@ ??_7CIniSections@@6B@ ??_7CManufacturers@@6B@ ??_7CPrinterDriverInf@@6B@ ?AllocAndGetDependentFiles@CPrinterDriverInf@@IAEPA_WPB_W0000@Z ?AllocAndGetValue@CPrinterDriverInf@@IAEPA_WPB_W00IAAI@Z ?AllocAndGetValueEx@CPrinterDriverInf@@IAEPA_WPB_W000I0IAAI@Z ?Clear@CDeviceInf@@QAEXXZ ?Clear@CDeviceInfSection@@QAEXXZ ?Clear@CIniSections@@QAEXXZ ?Clear@CManufacturers@@QAEXXZ ?Count@CDeviceInfSection@@QAEKXZ ?Count@CIniSections@@QAEKXZ ?DoInstall@CDeviceInf@@IAEHPB_WI0I0I@Z ?GetConfigFile@CPrinterDriverInf@@QAEHPB_WI0IAAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@K@Z ?GetDataFile@CPrinterDriverInf@@QAEHPB_WI0IAAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@K@Z ?GetDeviceId@CDeviceInf@@QAEPB_WK@Z ?GetDeviceIdCount@CDeviceInf@@QAEKXZ ?GetDeviceIdList@CDeviceInf@@IAEHH@Z ?GetDriverDesc@CDeviceInf@@QAEPB_WKPB_WI@Z ?GetDriverFile@CPrinterDriverInf@@QAEHPB_WI0IAAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@K@Z ?GetDriverVer@CDeviceInf@@QAEPB_WXZ ?GetDriversCount@CDeviceInf@@QAEKPB_WI@Z ?GetFileInfo@CPrinterDriverInf@@IAEHPB_WI0IAAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@K0@Z ?GetFilesFromCopyFilesSection@CPrinterDriverInf@@IAEHPB_WI0AAV?$vector@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V?$allocator@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@std@@@Z ?GetFullInfo@CDeviceInf@@QAEHH@Z ?GetHelpFile@CPrinterDriverInf@@QAEHPB_WI0IAAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@K@Z ?GetInfClass@CDeviceInf@@QAEPB_WXZ ?GetInstallSection@CDeviceInf@@IAEKPB_WI0IKPAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@1@Z ?GetInstallSection@CDeviceInf@@QAEKPB_WIHPA_WPAK12PAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z ?GetItem@CIniSections@@QAEPB_WK@Z ?GetItemLength@CIniSections@@QAEIK@Z ?GetKey@CDeviceInfSection@@QAEPB_WK@Z ?GetLanguageMonitorInfo@CPrinterDriverInf@@QAEHPB_WI0IAAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@K@Z ?GetList@CDeviceInfSection@@QAEHXZ ?GetList@CIniSections@@QAEHXZ ?GetList@CManufacturers@@QAEHXZ ?GetMfg@CDeviceInf@@QAEPB_WK@Z ?GetMfgCount@CDeviceInf@@QAEKXZ ?GetModelsSeed@CManufacturers@@QAEPB_WK@Z ?GetModelsSeedLength@CManufacturers@@QAEIK@Z ?GetPrintProcessorInfo@CPrinterDriverInf@@QAEHPB_WI0IAAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@K@Z ?GetSuitableDriverName@CDeviceInf@@QAEKPB_WIHPA_WPAK@Z ?GetValue@CDeviceInfSection@@QAEPB_WK@Z ?GetValue@CDeviceInfSection@@QAEPB_WPB_W@Z ?HasSuitableDriver@CDeviceInf@@QAEKPB_WI0I@Z ?Init@CDeviceInf@@QAEHPB_WIHH@Z ?Init@CDeviceInfSection@@QAEHPB_WIPAVCInfStringTable@@0I@Z ?Init@CImageDriverInf@@QAEHPB_WIHH@Z ?Init@CIniSections@@QAEHPB_WI@Z ?Init@CManufacturers@@QAEHPB_WIPAVCInfStringTable@@0I@Z ?Init@CPrinterDriverInf@@QAEHPB_WIHH@Z ?InitWFN@CDeviceInfSection@@QAEHPB_WIPAVCInfStringTable@@0I@Z ?InstallDriver@CDeviceInf@@QAEHPB_WI0IK@Z ?InstallDriver@CDeviceInf@@QAEHPB_WIH@Z ?IsComment@CDeviceInfSection@@IAEHPB_WI@Z ?SetAltProgress@CDeviceInf@@QAEXPAUHWND__@@I@Z ?SetColorProfile@CPrinterDriverInf@@IAEHPB_WI0I@Z ?SetDirectoryId@CDeviceInf@@MAEHPAXPB_WI1I@Z ?SetDirectoryId@CPrinterDriverInf@@MAEHPAXPB_WI1I@Z ?SetOwner@CDeviceInf@@QAEXPAUHWND__@@@Z

Name

.text

Size

579KB

Virtual Size

579KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

160KB

Virtual Size

160KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

11KB

Virtual Size

43KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

143KB

Virtual Size

143KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

Size

135KB

Virtual Size

137KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

Size

114KB

Virtual Size

114KB

Characteristics

IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-14_0655125429531f034b4d35764314ce2c_amadey_darkgate_elex_rhadamanthys_smoke-loader_stealc_stop_virut

PE Signature issue

setupapi

mscms

psapi

rpcrt4

kernel32

user32

gdi32

msimg32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

ole32

oleaut32

lz32

version

generic