2026-08-15_389c21c2fd4dbcec4baa98d3749e79b3_amadey_darkgate_elex_glassworm_luca-stealer_lynx_medusalocker_njrat

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-15_389c21c2fd4dbcec4baa98d3749e79b3_amadey_darkgate_elex_glassworm_luca-stealer_lynx_medusalocker_njrat
Size 3.8MB
Sample260815-1jdl6svwcs
SHA256 f032765c742dcd683edd6baed6b7fade9aaf7fb59d4883275d6dc4e7f7153392
MD5 389c21c2fd4dbcec4baa98d3749e79b3
SHA1 5ccfd042dbaa589355cbba9f30588de3bbf6f64b
SHA512 29006799d2e3ee64d852343ca73a79771a47760391ad6f4b0bd8d76d21d471232501ae471a4fbd9bb7957e9c465717e75ec21d3aa75bfea403c30af7a3fb1057
SSDEEP 49152:TLK/KlNGaK1bfYgBkoyafS4F3rYGFNEzeET5QxCZmav43CQGxUWnsXnOIRGEPQ/q:TeSHnKLBkoyaXMUN4eS43ChnnLm
TLSH
T167068D61374A8535D5B702764EB9ABAA942DFD341F7090CBE3D49A6E29603C20F32F17
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-15_389c21c2fd4dbcec4baa98d3749e79b3_amadey_darkgate_elex_glassworm_luca-stealer_lynx_medusalocker_njrat

File Explorer

2026-08-15_389c21c2fd4dbcec4baa98d3749e79b3_amadey_darkgate_elex_glassworm_luca-stealer_lynx_medusalocker_njrat

.exe 3.8MB

2026-08-15_389c21c2fd4dbcec4baa98d3749e79b3_amadey_darkgate_elex_glassworm_luca-stealer_lynx_medusalocker_njrat

IMPHASH fab0ab13cfb92408f2fd26bc9d53f4f1
SHA256 f032765c742dcd683edd6baed6b7fade9aaf7fb59d4883275d6dc4e7f7153392
MD5 389c21c2fd4dbcec4baa98d3749e79b3
SHA1 5ccfd042dbaa589355cbba9f30588de3bbf6f64b
SHA512 29006799d2e3ee64d852343ca73a79771a47760391ad6f4b0bd8d76d21d471232501ae471a4fbd9bb7957e9c465717e75ec21d3aa75bfea403c30af7a3fb1057
SSDEEP 49152:TLK/KlNGaK1bfYgBkoyafS4F3rYGFNEzeET5QxCZmav43CQGxUWnsXnOIRGEPQ/q:TeSHnKLBkoyaXMUN4eS43ChnnLm
TLSH
T167068D61374A8535D5B702764EB9ABAA942DFD341F7090CBE3D49A6E29603C20F32F17
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

1666432

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

D:\buildagent-cd_8811\p4\1445861911\services\AMTSW\UNS\ReleaseUniversal\LMS.pdb

cfgmgr32

CM_Get_Device_Interface_List_SizeA CM_Get_Device_Interface_ListA

winhttp

WinHttpSetOption WinHttpOpenRequest WinHttpCloseHandle WinHttpOpen WinHttpQueryDataAvailable WinHttpReadData WinHttpAddRequestHeaders WinHttpSetCredentials WinHttpQueryHeaders WinHttpSendRequest WinHttpQueryAuthSchemes WinHttpConnect WinHttpReceiveResponse

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter

api-ms-win-core-synch-l1-1-0

SetEvent ReleaseMutex WaitForSingleObject WaitForMultipleObjectsEx CreateEventW InitializeCriticalSectionEx EnterCriticalSection WaitForSingleObjectEx CreateMutexW InitializeCriticalSection DeleteCriticalSection ReleaseSemaphore TryEnterCriticalSection InitializeCriticalSectionAndSpinCount ResetEvent CreateEventA LeaveCriticalSection

api-ms-win-core-synch-l1-2-0

SignalObjectAndWait Sleep

api-ms-win-core-sysinfo-l1-1-0

GetSystemTimeAsFileTime GetSystemTime GetLogicalProcessorInformation GetSystemInfo GetTickCount GetVersionExW GetComputerNameExA

api-ms-win-core-kernel32-legacy-l1-1-1

SetDllDirectoryW VerifyVersionInfoW

api-ms-win-core-processenvironment-l1-1-0

GetCommandLineW SetEnvironmentVariableW FreeEnvironmentStringsW GetStdHandle GetCurrentDirectoryW GetCommandLineA SetStdHandle ExpandEnvironmentStringsW GetEnvironmentStringsW

api-ms-win-core-errorhandling-l1-1-0

GetLastError UnhandledExceptionFilter SetUnhandledExceptionFilter SetLastError RaiseException

api-ms-win-core-version-l1-1-1

GetFileVersionInfoSizeW GetFileVersionInfoW

api-ms-win-core-version-l1-1-0

VerQueryValueW

api-ms-win-core-registry-l1-1-0

RegCloseKey RegOpenKeyExW RegQueryInfoKeyW RegQueryValueExW RegCreateKeyExW RegDeleteKeyExW RegSetValueExW RegSetKeySecurity RegEnumKeyExW RegDeleteValueW

ws2_32

WSAAccept WSAStartup ntohs getnameinfo freeaddrinfo htons gethostname ioctlsocket __WSAFDIsSet WSASend select send WSAEnumNetworkEvents getservbyname getaddrinfo WSAGetLastError ntohl socket getsockname getpeername closesocket connect bind listen accept inet_addr WSAAddressToStringA WSACreateEvent WSACloseEvent WSACleanup recv inet_ntoa htonl WSAEventSelect setsockopt shutdown

api-ms-win-core-com-l1-1-0

CoResumeClassObjects PropVariantClear CoTaskMemFree CoRevokeClassObject CoRegisterClassObject CoRevertToSelf CoAddRefServerProcess CoInitializeEx CoUninitialize CoSetProxyBlanket CoTaskMemAlloc CoTaskMemRealloc CoReleaseServerProcess CoImpersonateClient CoInitializeSecurity CoCreateInstance StringFromGUID2

oleaut32

SafeArrayGetUBound SafeArrayLock SafeArrayGetLBound SafeArrayCreate VarBstrCat SysAllocString SysFreeString VariantInit VariantClear SysAllocStringByteLen VariantChangeType SysStringByteLen LoadRegTypeLi SysAllocStringLen UnRegisterTypeLi RegisterTypeLi LoadTypeLi SafeArrayCreateVector SysStringLen VarUI4FromStr SafeArrayUnlock SafeArrayPutElement

api-ms-win-core-util-l1-1-0

EncodePointer DecodePointer

api-ms-win-core-handle-l1-1-0

DuplicateHandle CloseHandle

api-ms-win-core-processthreads-l1-1-0

ExitThread GetCurrentProcess TerminateProcess GetStartupInfoW CreateThread GetThreadPriority OpenThreadToken TlsAlloc SwitchToThread TlsFree SuspendThread OpenProcessToken GetCurrentThread TlsGetValue GetCurrentProcessId GetExitCodeThread TlsSetValue GetThreadId GetCurrentThreadId ExitProcess SetThreadPriority ResumeThread

api-ms-win-core-libraryloader-l1-2-0

GetModuleHandleA GetProcAddress LoadLibraryExW LoadResource GetModuleHandleExW LoadStringW GetModuleHandleW GetModuleFileNameW FreeLibrary FreeLibraryAndExitThread LoadLibraryExA SizeofResource

api-ms-win-core-libraryloader-l1-2-1

LoadLibraryW FindResourceW

api-ms-win-security-base-l1-1-0

GetLengthSid CopySid GetTokenInformation FreeSid SetSecurityDescriptorDacl InitializeSecurityDescriptor IsValidSid SetSecurityDescriptorGroup EqualSid CreateWellKnownSid AdjustTokenPrivileges AllocateAndInitializeSid SetSecurityDescriptorOwner

api-ms-win-core-string-obsolete-l1-1-0

lstrlenW lstrcmpiW

api-ms-win-core-string-l2-1-0

CharUpperW CharNextW

api-ms-win-core-string-l1-1-0

WideCharToMultiByte CompareStringW GetStringTypeW MultiByteToWideChar

api-ms-win-core-registry-l2-1-0

RegCreateKeyW RegDeleteKeyW

api-ms-win-service-management-l2-1-0

ChangeServiceConfig2W ChangeServiceConfigW

api-ms-win-service-management-l1-1-0

OpenServiceW OpenSCManagerW CloseServiceHandle DeleteService CreateServiceW

api-ms-win-service-winsvc-l1-1-0

ControlService

api-ms-win-service-core-l1-1-0

RegisterServiceCtrlHandlerExW SetServiceStatus StartServiceCtrlDispatcherW

api-ms-win-core-heap-l2-1-0

LocalFree GlobalAlloc GlobalFree LocalAlloc

api-ms-win-core-localization-l1-2-0

GetSystemDefaultLCID FormatMessageW GetLocaleInfoW LCMapStringW GetACP EnumSystemLocalesW IsValidCodePage GetCPInfo GetUserDefaultLCID GetOEMCP IsValidLocale

api-ms-win-security-lsalookup-l2-1-0

LookupPrivilegeValueW LookupAccountSidW

api-ms-win-security-sddl-l1-1-0

ConvertSidToStringSidW

api-ms-win-core-wow64-l1-1-0

IsWow64Process

crypt32

CertGetNameStringW CryptMsgGetParam CryptProtectData CryptQueryObject CertOpenStore CryptMsgClose CertCloseStore CertFreeCertificateContext CertFindCertificateInStore CryptUnprotectData

api-ms-win-core-file-l1-1-0

FlushFileBuffers SetFilePointerEx GetFileInformationByHandle GetFileType FindFirstFileW CreateFileW CreateFileA SetEndOfFile GetFileAttributesW ReadFile SetFilePointer FindFirstFileExW GetFullPathNameW WriteFile FindNextFileW GetDriveTypeW GetFinalPathNameByHandleW FindClose UnlockFileEx LockFileEx

wintrust

WinVerifyTrust

api-ms-win-security-provider-l1-1-0

SetEntriesInAclW

api-ms-win-core-processthreads-l1-1-1

IsProcessorFeaturePresent GetThreadTimes

api-ms-win-core-kernel32-legacy-l1-1-0

UnregisterWait GetComputerNameA RegisterWaitForSingleObject GetSystemPowerStatus

api-ms-win-core-synch-l1-2-1

CreateSemaphoreW WaitForMultipleObjects

api-ms-win-core-io-l1-1-0

GetOverlappedResult DeviceIoControl

api-ms-win-core-debug-l1-1-0

OutputDebugStringA OutputDebugStringW IsDebuggerPresent

api-ms-win-core-io-l1-1-1

CancelIo

api-ms-win-core-heap-l1-1-0

GetProcessHeap HeapAlloc HeapReAlloc HeapSize HeapFree

rpcrt4

UuidCreate UuidToStringW RpcStringFreeW

api-ms-win-power-setting-l1-1-0

PowerReadDCValue PowerReadACValue

api-ms-win-core-sysinfo-l1-2-0

VerSetConditionMask

ext-ms-win-shell32-shellfolders-l1-1-0

SHGetSpecialFolderPathW

iphlpapi

NotifyRouteChange CancelIPChangeNotify GetAdaptersInfo GetIpAddrTable GetPerAdapterInfo IpRenewAddress GetInterfaceInfo NotifyIpInterfaceChange CancelMibChangeNotify2 GetAdaptersAddresses GetExtendedTcpTable SetTcpEntry

api-ms-win-core-shutdown-l1-1-0

InitiateSystemShutdownExW

powrprof

SetSuspendState

api-ms-win-power-base-l1-1-0

GetPwrCapabilities

api-ms-win-core-memory-l1-1-0

VirtualAlloc VirtualQuery VirtualProtect VirtualFree

advapi32

DeregisterEventSource ReportEventW RegisterEventSourceW

user32

PostThreadMessageW UnregisterDeviceNotification MessageBoxW RegisterDeviceNotificationW DispatchMessageW TranslateMessage GetMessageW

api-ms-win-core-interlocked-l1-1-0

InitializeSListHead InterlockedPopEntrySList QueryDepthSList InterlockedFlushSList InterlockedPushEntrySList

api-ms-win-core-threadpool-legacy-l1-1-0

DeleteTimerQueueTimer CreateTimerQueue ChangeTimerQueueTimer CreateTimerQueueTimer UnregisterWaitEx

api-ms-win-core-systemtopology-l1-1-0

GetNumaHighestNodeNumber

api-ms-win-core-processtopology-obsolete-l1-1-0

SetThreadAffinityMask GetProcessAffinityMask

api-ms-win-core-rtlsupport-l1-1-0

RtlUnwind

api-ms-win-core-namedpipe-l1-1-0

PeekNamedPipe

api-ms-win-core-timezone-l1-1-0

SystemTimeToTzSpecificLocalTime FileTimeToSystemTime GetTimeZoneInformation

api-ms-win-core-console-l1-1-0

GetConsoleCP SetConsoleCtrlHandler ReadConsoleW GetConsoleMode WriteConsoleW

api-ms-win-core-datetime-l1-1-0

GetDateFormatW GetTimeFormatW

UTF8Toisolat1 _GetDriverVersion@8 _TeeConnect@4 _TeeDisconnect@4 _TeeFWStatus@12 _TeeGetDeviceHandle@4 _TeeInit@12 _TeeInitGUID@12 _TeeInitHandle@12 _TeeRead@20 _TeeWrite@20 __oldXMLWDcompatibility __xmlBufferAllocScheme __xmlDefaultBufferSize __xmlDefaultSAXLocator __xmlDeregisterNodeDefaultValue __xmlDoValidityCheckingDefaultValue __xmlErrEncoding __xmlGenericError __xmlGenericErrorContext __xmlGetWarningsDefaultValue __xmlIndentTreeOutput __xmlKeepBlanksDefaultValue __xmlLastError __xmlLineNumbersDefaultValue __xmlLoadExtDtdDefaultValue __xmlOutputBufferCreateFilenameValue __xmlParserDebugEntities __xmlParserInputBufferCreateFilenameValue __xmlParserVersion __xmlPedanticParserDefaultValue __xmlRaiseError __xmlRegisterNodeDefaultValue __xmlSaveNoEmptyTags __xmlSimpleError __xmlStructuredError __xmlStructuredErrorContext __xmlSubstituteEntitiesDefaultValue __xmlTreeIndentString initGenericErrorDefaultFunc inputPop inputPush isolat1ToUTF8 namePop namePush nodePop nodePush oldXMLWDcompatibility valuePop valuePush xmlAddAttributeDecl xmlAddChild xmlAddChildList xmlAddDocEntity xmlAddDtdEntity xmlAddElementDecl xmlAddEncodingAlias xmlAddID xmlAddNextSibling xmlAddNotationDecl xmlAddPrevSibling xmlAddRef xmlAddSibling xmlAllocOutputBuffer xmlAllocParserInputBuffer xmlAttrSerializeTxtContent xmlBufContent xmlBufEnd xmlBufGetNodeContent xmlBufNodeDump xmlBufShrink xmlBufUse xmlBufferAdd xmlBufferAddHead xmlBufferAllocScheme xmlBufferCCat xmlBufferCat xmlBufferContent xmlBufferCreate xmlBufferCreateSize xmlBufferCreateStatic xmlBufferDetach xmlBufferDump xmlBufferEmpty xmlBufferFree xmlBufferGrow xmlBufferLength xmlBufferResize xmlBufferSetAllocationScheme xmlBufferShrink xmlBufferWriteCHAR xmlBufferWriteChar xmlBufferWriteQuotedString xmlBuildQName xmlBuildRelativeURI xmlBuildURI xmlByteConsumed xmlCanonicPath xmlCharEncCloseFunc xmlCharEncFirstLine xmlCharEncInFunc xmlCharEncOutFunc xmlCharInRange xmlCharStrdup xmlCharStrndup xmlCheckFilename xmlCheckHTTPInput xmlCheckLanguageID xmlCheckUTF8 xmlCheckVersion xmlChildElementCount xmlCleanupCharEncodingHandlers xmlCleanupEncodingAliases xmlCleanupGlobals xmlCleanupInputCallbacks xmlCleanupMemory xmlCleanupOutputCallbacks xmlCleanupParser xmlCleanupThreads xmlClearNodeInfoSeq xmlClearParserCtxt xmlCopyAttributeTable xmlCopyChar xmlCopyCharMultiByte xmlCopyDoc xmlCopyDocElementContent xmlCopyDtd xmlCopyElementContent xmlCopyElementTable xmlCopyEntitiesTable xmlCopyEnumeration xmlCopyError xmlCopyNamespace xmlCopyNamespaceList xmlCopyNode xmlCopyNodeList xmlCopyNotationTable xmlCopyProp xmlCopyPropList xmlCreateDocParserCtxt xmlCreateEntitiesTable xmlCreateEntityParserCtxt xmlCreateEnumeration xmlCreateFileParserCtxt xmlCreateIOParserCtxt xmlCreateIntSubset xmlCreateMemoryParserCtxt xmlCreateURI xmlCreateURLParserCtxt xmlCtxtGetLastError xmlCtxtReadDoc xmlCtxtReadFd xmlCtxtReadFile xmlCtxtReadIO xmlCtxtReadMemory xmlCtxtReset xmlCtxtResetLastError xmlCtxtResetPush xmlCtxtUseOptions xmlCurrentChar xmlDOMWrapAdoptNode xmlDOMWrapCloneNode xmlDOMWrapFreeCtxt xmlDOMWrapNewCtxt xmlDOMWrapReconcileNamespaces xmlDOMWrapRemoveNode xmlDefaultBufferSize xmlDefaultSAXHandler xmlDefaultSAXHandlerInit xmlDefaultSAXLocator xmlDelEncodingAlias xmlDeregisterNodeDefault xmlDeregisterNodeDefaultValue xmlDetectCharEncoding xmlDictCleanup xmlDictCreate xmlDictCreateSub xmlDictExists xmlDictFree xmlDictGetUsage xmlDictLookup xmlDictOwns xmlDictQLookup xmlDictReference xmlDictSetLimit xmlDictSize xmlDoValidityCheckingDefaultValue xmlDocCopyNode xmlDocCopyNodeList xmlDocDump xmlDocDumpFormatMemory xmlDocDumpFormatMemoryEnc xmlDocDumpMemory xmlDocDumpMemoryEnc xmlDocFormatDump xmlDocGetRootElement xmlDocSetRootElement xmlDumpAttributeDecl xmlDumpAttributeTable xmlDumpElementDecl xmlDumpElementTable xmlDumpEntitiesTable xmlDumpEntityDecl xmlDumpNotationDecl xmlDumpNotationTable xmlElemDump xmlEncodeEntitiesReentrant xmlEncodeSpecialChars xmlErrMemory xmlEscapeFormatString xmlFileClose xmlFileMatch xmlFileOpen xmlFileRead xmlFindCharEncodingHandler xmlFirstElementChild xmlFree xmlFreeAttributeTable xmlFreeDoc xmlFreeDocElementContent xmlFreeDtd xmlFreeElementContent xmlFreeElementTable xmlFreeEntitiesTable xmlFreeEnumeration xmlFreeIDTable xmlFreeInputStream xmlFreeMutex xmlFreeNode xmlFreeNodeList xmlFreeNotationTable xmlFreeNs xmlFreeNsList xmlFreeParserCtxt xmlFreeParserInputBuffer xmlFreeProp xmlFreePropList xmlFreeRMutex xmlFreeRefTable xmlFreeURI xmlGcMemGet xmlGcMemSetup xmlGenericError xmlGenericErrorContext xmlGetBufferAllocationScheme xmlGetCharEncodingHandler xmlGetCharEncodingName xmlGetCompressMode xmlGetDocCompressMode xmlGetDocEntity xmlGetDtdAttrDesc xmlGetDtdElementDesc xmlGetDtdEntity xmlGetDtdNotationDesc xmlGetDtdQAttrDesc xmlGetDtdQElementDesc xmlGetEncodingAlias xmlGetExternalEntityLoader xmlGetGlobalState xmlGetID xmlGetIntSubset xmlGetLastChild xmlGetLastError xmlGetLineNo xmlGetNoNsProp xmlGetNodePath xmlGetNsList xmlGetNsProp xmlGetParameterEntity xmlGetPredefinedEntity xmlGetProp xmlGetRefs xmlGetThreadId xmlGetUTF8Char xmlGetWarningsDefaultValue xmlHasFeature xmlHasNsProp xmlHasProp xmlHashAddEntry xmlHashAddEntry2 xmlHashAddEntry3 xmlHashCopy xmlHashCreate xmlHashCreateDict xmlHashDefaultDeallocator xmlHashFree xmlHashLookup xmlHashLookup2 xmlHashLookup3 xmlHashQLookup xmlHashQLookup2 xmlHashQLookup3 xmlHashRemoveEntry xmlHashRemoveEntry2 xmlHashRemoveEntry3 xmlHashScan xmlHashScan3 xmlHashScanFull xmlHashScanFull3 xmlHashSize xmlHashUpdateEntry xmlHashUpdateEntry2 xmlHashUpdateEntry3 xmlIndentTreeOutput xmlInitCharEncodingHandlers xmlInitGlobals xmlInitMemory xmlInitNodeInfoSeq xmlInitParser xmlInitParserCtxt xmlInitThreads xmlInitializeDict xmlInitializeGlobalState xmlIsBaseChar xmlIsBaseCharGroup xmlIsBlank xmlIsBlankNode xmlIsChar xmlIsCharGroup xmlIsCombining xmlIsCombiningGroup xmlIsDigit xmlIsDigitGroup xmlIsExtender xmlIsExtenderGroup xmlIsID xmlIsIdeographic xmlIsIdeographicGroup xmlIsLetter xmlIsMainThread xmlIsMixedElement xmlIsPubidChar xmlIsPubidChar_tab xmlIsRef xmlIsXHTML xmlKeepBlanksDefault xmlKeepBlanksDefaultValue xmlLastElementChild xmlLastError xmlLineNumbersDefault xmlLineNumbersDefaultValue xmlLinkGetData xmlListAppend xmlListClear xmlListCopy xmlListCreate xmlListDelete xmlListDup xmlListEmpty xmlListEnd xmlListFront xmlListInsert xmlListMerge xmlListPopBack xmlListPopFront xmlListPushBack xmlListPushFront xmlListRemoveAll xmlListRemoveFirst xmlListRemoveLast xmlListReverse xmlListReverseSearch xmlListReverseWalk xmlListSearch xmlListSize xmlListSort xmlListWalk xmlLoadExtDtdDefaultValue xmlLoadExternalEntity xmlLockLibrary xmlMalloc xmlMallocAtomic xmlMallocAtomicLoc xmlMallocLoc xmlMemBlocks xmlMemDisplay xmlMemDisplayLast xmlMemFree xmlMemGet xmlMemMalloc xmlMemRealloc xmlMemSetup xmlMemShow xmlMemStrdup xmlMemStrdupLoc xmlMemUsed xmlMemoryDump xmlMemoryStrdup xmlMutexLock xmlMutexUnlock xmlNewCDataBlock xmlNewCharEncodingHandler xmlNewCharRef xmlNewChild xmlNewComment xmlNewDoc xmlNewDocComment xmlNewDocElementContent xmlNewDocFragment xmlNewDocNode xmlNewDocNodeEatName xmlNewDocPI xmlNewDocProp xmlNewDocRawNode xmlNewDocText xmlNewDocTextLen xmlNewDtd xmlNewElementContent xmlNewEntity xmlNewEntityInputStream xmlNewIOInputStream xmlNewInputFromFile xmlNewInputStream xmlNewMutex xmlNewNode xmlNewNodeEatName xmlNewNs xmlNewNsProp xmlNewNsPropEatName xmlNewPI xmlNewParserCtxt xmlNewProp xmlNewRMutex xmlNewReference xmlNewStringInputStream xmlNewText xmlNewTextChild xmlNewTextLen xmlNextChar xmlNextElementSibling xmlNoNetExternalEntityLoader xmlNodeAddContent xmlNodeAddContentLen xmlNodeBufGetContent xmlNodeDump xmlNodeDumpOutput xmlNodeGetBase xmlNodeGetContent xmlNodeGetLang xmlNodeGetSpacePreserve xmlNodeIsText xmlNodeListGetRawString xmlNodeListGetString xmlNodeSetBase xmlNodeSetContent xmlNodeSetContentLen xmlNodeSetLang xmlNodeSetName xmlNodeSetSpacePreserve xmlNormalizeURIPath xmlNormalizeWindowsPath xmlOutputBufferClose xmlOutputBufferCreateBuffer xmlOutputBufferCreateFd xmlOutputBufferCreateFile xmlOutputBufferCreateFilename xmlOutputBufferCreateFilenameDefault xmlOutputBufferCreateFilenameValue xmlOutputBufferCreateIO xmlOutputBufferFlush xmlOutputBufferGetContent xmlOutputBufferGetSize xmlOutputBufferWrite xmlOutputBufferWriteEscape xmlOutputBufferWriteString xmlParseAttValue xmlParseAttributeListDecl xmlParseAttributeType xmlParseCDSect xmlParseCharData xmlParseCharEncoding xmlParseCharRef xmlParseComment xmlParseContent xmlParseCtxtExternalEntity xmlParseDefaultDecl xmlParseDocTypeDecl xmlParseDocument xmlParseElement xmlParseElementChildrenContentDecl xmlParseElementContentDecl xmlParseElementDecl xmlParseElementMixedContentDecl xmlParseEncName xmlParseEncodingDecl xmlParseEntityDecl xmlParseEntityRef xmlParseEntityValue xmlParseEnumeratedType xmlParseEnumerationType xmlParseExtParsedEnt xmlParseExternalID xmlParseExternalSubset xmlParseInNodeContext xmlParseMarkupDecl xmlParseMisc xmlParseName xmlParseNmtoken xmlParseNotationDecl xmlParseNotationType xmlParsePEReference xmlParsePI xmlParsePITarget xmlParsePubidLiteral xmlParseReference xmlParseSDDecl xmlParseSystemLiteral xmlParseTextDecl xmlParseURI xmlParseURIRaw xmlParseURIReference xmlParseVersionInfo xmlParseVersionNum xmlParseXMLDecl xmlParserAddNodeInfo xmlParserDebugEntities xmlParserError xmlParserFindNodeInfo xmlParserFindNodeInfoIndex xmlParserGetDirectory xmlParserHandlePEReference xmlParserInputBufferCreateFd xmlParserInputBufferCreateFile xmlParserInputBufferCreateFilename xmlParserInputBufferCreateFilenameDefault xmlParserInputBufferCreateFilenameValue xmlParserInputBufferCreateIO xmlParserInputBufferCreateMem xmlParserInputBufferCreateStatic xmlParserInputBufferGrow xmlParserInputBufferPush xmlParserInputBufferRead xmlParserInputGrow xmlParserInputRead xmlParserInputShrink xmlParserMaxDepth xmlParserPrintFileContext xmlParserPrintFileInfo xmlParserValidityError xmlParserValidityWarning xmlParserVersion xmlParserWarning xmlPathToURI xmlPedanticParserDefault xmlPedanticParserDefaultValue xmlPopInput xmlPopInputCallbacks xmlPopOutputCallbacks xmlPreviousElementSibling xmlPrintURI xmlPushInput xmlRMutexLock xmlRMutexUnlock xmlReadDoc xmlReadFd xmlReadFile xmlReadIO xmlReadMemory xmlRealloc xmlReallocLoc xmlReconciliateNs xmlRegisterCharEncodingHandler xmlRegisterDefaultInputCallbacks xmlRegisterDefaultOutputCallbacks xmlRegisterInputCallbacks xmlRegisterNodeDefault xmlRegisterNodeDefaultValue xmlRegisterOutputCallbacks xmlRemoveID xmlRemoveProp xmlRemoveRef xmlReplaceNode xmlResetError xmlResetLastError xmlSAX2AttributeDecl xmlSAX2CDataBlock xmlSAX2Characters xmlSAX2Comment xmlSAX2ElementDecl xmlSAX2EndDocument xmlSAX2EndElementNs xmlSAX2EntityDecl xmlSAX2ExternalSubset xmlSAX2GetColumnNumber xmlSAX2GetEntity xmlSAX2GetLineNumber xmlSAX2GetParameterEntity xmlSAX2GetPublicId xmlSAX2GetSystemId xmlSAX2HasExternalSubset xmlSAX2HasInternalSubset xmlSAX2IgnorableWhitespace xmlSAX2InitDefaultSAXHandler xmlSAX2InternalSubset xmlSAX2IsStandalone xmlSAX2NotationDecl xmlSAX2ProcessingInstruction xmlSAX2Reference xmlSAX2ResolveEntity xmlSAX2SetDocumentLocator xmlSAX2StartDocument xmlSAX2StartElementNs xmlSAX2UnparsedEntityDecl xmlSAXVersion xmlSaveClose xmlSaveDoc xmlSaveFile xmlSaveFileEnc xmlSaveFileTo xmlSaveFlush xmlSaveFormatFile xmlSaveFormatFileEnc xmlSaveFormatFileTo xmlSaveNoEmptyTags xmlSaveSetAttrEscape xmlSaveSetEscape xmlSaveToBuffer xmlSaveToFd xmlSaveToFilename xmlSaveToIO xmlSaveTree xmlSaveUri xmlSearchNs xmlSearchNsByHref xmlSetBufferAllocationScheme xmlSetCompressMode xmlSetDocCompressMode xmlSetExternalEntityLoader xmlSetGenericErrorFunc xmlSetListDoc xmlSetNs xmlSetNsProp xmlSetProp xmlSetStructuredErrorFunc xmlSetTreeDoc xmlSkipBlankChars xmlSnprintfElementContent xmlSplitQName xmlSplitQName2 xmlSplitQName3 xmlSprintfElementContent xmlStopParser xmlStrEqual xmlStrPrintf xmlStrQEqual xmlStrVPrintf xmlStrcasecmp xmlStrcasestr xmlStrcat xmlStrchr xmlStrcmp xmlStrdup xmlStringComment xmlStringCurrentChar xmlStringDecodeEntities xmlStringGetNodeList xmlStringLenDecodeEntities xmlStringLenGetNodeList xmlStringText xmlStringTextNoenc xmlStrlen xmlStrncasecmp xmlStrncat xmlStrncatNew xmlStrncmp xmlStrndup xmlStrstr xmlStrsub xmlStructuredError xmlStructuredErrorContext xmlSubstituteEntitiesDefault xmlSubstituteEntitiesDefaultValue xmlSwitchEncoding xmlSwitchInputEncoding xmlSwitchToEncoding xmlTextConcat xmlTextMerge xmlThrDefBufferAllocScheme xmlThrDefDefaultBufferSize xmlThrDefDeregisterNodeDefault xmlThrDefDoValidityCheckingDefaultValue xmlThrDefGetWarningsDefaultValue xmlThrDefIndentTreeOutput xmlThrDefKeepBlanksDefaultValue xmlThrDefLineNumbersDefaultValue xmlThrDefLoadExtDtdDefaultValue xmlThrDefOutputBufferCreateFilenameDefault xmlThrDefParserDebugEntities xmlThrDefParserInputBufferCreateFilenameDefault xmlThrDefPedanticParserDefaultValue xmlThrDefRegisterNodeDefault xmlThrDefSaveNoEmptyTags xmlThrDefSetGenericErrorFunc xmlThrDefSetStructuredErrorFunc xmlThrDefSubstituteEntitiesDefaultValue xmlThrDefTreeIndentString xmlTreeIndentString xmlURIEscape xmlURIEscapeStr xmlURIUnescapeString xmlUTF8Charcmp xmlUTF8Size xmlUTF8Strlen xmlUTF8Strloc xmlUTF8Strndup xmlUTF8Strpos xmlUTF8Strsize xmlUTF8Strsub xmlUnlinkNode xmlUnlockLibrary xmlUnsetNsProp xmlUnsetProp xmlValidateNCName xmlValidateNMToken xmlValidateName xmlValidateQName xmlXPathAddValues xmlXPathBooleanFunction xmlXPathCastBooleanToNumber xmlXPathCastBooleanToString xmlXPathCastNodeSetToBoolean xmlXPathCastNodeSetToNumber xmlXPathCastNodeSetToString xmlXPathCastNodeToNumber xmlXPathCastNodeToString xmlXPathCastNumberToBoolean xmlXPathCastNumberToString xmlXPathCastStringToBoolean xmlXPathCastStringToNumber xmlXPathCastToBoolean xmlXPathCastToNumber xmlXPathCastToString xmlXPathCeilingFunction xmlXPathCmpNodes xmlXPathCompareValues xmlXPathCompile xmlXPathCompiledEval xmlXPathCompiledEvalToBoolean xmlXPathConcatFunction xmlXPathContainsFunction xmlXPathContextSetCache xmlXPathConvertBoolean xmlXPathConvertNumber xmlXPathConvertString xmlXPathCountFunction xmlXPathCtxtCompile xmlXPathDifference xmlXPathDistinct xmlXPathDistinctSorted xmlXPathDivValues xmlXPathEqualValues xmlXPathErr xmlXPathEval xmlXPathEvalExpr xmlXPathEvalExpression xmlXPathEvalPredicate xmlXPathEvaluatePredicateResult xmlXPathFalseFunction xmlXPathFloorFunction xmlXPathFreeCompExpr xmlXPathFreeContext xmlXPathFreeNodeSet xmlXPathFreeNodeSetList xmlXPathFreeObject xmlXPathFreeParserContext xmlXPathFunctionLookup xmlXPathFunctionLookupNS xmlXPathHasSameNodes xmlXPathIdFunction xmlXPathInit xmlXPathIntersection xmlXPathIsInf xmlXPathIsNaN xmlXPathIsNodeType xmlXPathLangFunction xmlXPathLastFunction xmlXPathLeading xmlXPathLeadingSorted xmlXPathLocalNameFunction xmlXPathModValues xmlXPathMultValues xmlXPathNAN xmlXPathNINF xmlXPathNamespaceURIFunction xmlXPathNewBoolean xmlXPathNewCString xmlXPathNewContext xmlXPathNewFloat xmlXPathNewNodeSet xmlXPathNewNodeSetList xmlXPathNewParserContext xmlXPathNewString xmlXPathNewValueTree xmlXPathNextAncestor xmlXPathNextAncestorOrSelf xmlXPathNextAttribute xmlXPathNextChild xmlXPathNextDescendant xmlXPathNextDescendantOrSelf xmlXPathNextFollowing xmlXPathNextFollowingSibling xmlXPathNextNamespace xmlXPathNextParent xmlXPathNextPreceding xmlXPathNextPrecedingSibling xmlXPathNextSelf xmlXPathNodeEval xmlXPathNodeLeading xmlXPathNodeLeadingSorted xmlXPathNodeSetAdd xmlXPathNodeSetAddNs xmlXPathNodeSetAddUnique xmlXPathNodeSetContains xmlXPathNodeSetCreate xmlXPathNodeSetDel xmlXPathNodeSetFreeNs xmlXPathNodeSetMerge xmlXPathNodeSetRemove xmlXPathNodeSetSort xmlXPathNodeTrailing xmlXPathNodeTrailingSorted xmlXPathNormalizeFunction xmlXPathNotEqualValues xmlXPathNotFunction xmlXPathNsLookup xmlXPathNumberFunction xmlXPathObjectCopy xmlXPathOrderDocElems xmlXPathPINF xmlXPathParseNCName xmlXPathParseName xmlXPathPopBoolean xmlXPathPopExternal xmlXPathPopNodeSet xmlXPathPopNumber xmlXPathPopString xmlXPathPositionFunction xmlXPathRegisterAllFunctions xmlXPathRegisterFunc xmlXPathRegisterFuncLookup xmlXPathRegisterFuncNS xmlXPathRegisterNs xmlXPathRegisterVariable xmlXPathRegisterVariableLookup xmlXPathRegisterVariableNS xmlXPathRegisteredFuncsCleanup xmlXPathRegisteredNsCleanup xmlXPathRegisteredVariablesCleanup xmlXPathRoot xmlXPathRoundFunction xmlXPathSetContextNode xmlXPathStartsWithFunction xmlXPathStringEvalNumber xmlXPathStringFunction xmlXPathStringLengthFunction xmlXPathSubValues xmlXPathSubstringAfterFunction xmlXPathSubstringBeforeFunction xmlXPathSubstringFunction xmlXPathSumFunction xmlXPathTrailing xmlXPathTrailingSorted xmlXPathTranslateFunction xmlXPathTrueFunction xmlXPathValueFlipSign xmlXPathVariableLookup xmlXPathVariableLookupNS xmlXPathWrapCString xmlXPathWrapExternal xmlXPathWrapNodeSet xmlXPathWrapString xmlXPatherror

Name

.text

Size

2.1MB

Virtual Size

2.1MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

752KB

Virtual Size

752KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

188KB

Virtual Size

212KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.didat

Size

512B

Virtual Size

32B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

35KB

Virtual Size

35KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

776KB

Virtual Size

780KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-15_389c21c2fd4dbcec4baa98d3749e79b3_amadey_darkgate_elex_glassworm_luca-stealer_lynx_medusalocker_njrat

cfgmgr32

winhttp

api-ms-win-core-profile-l1-1-0

api-ms-win-core-synch-l1-1-0

api-ms-win-core-synch-l1-2-0

api-ms-win-core-sysinfo-l1-1-0

api-ms-win-core-kernel32-legacy-l1-1-1

api-ms-win-core-processenvironment-l1-1-0

api-ms-win-core-errorhandling-l1-1-0

api-ms-win-core-version-l1-1-1

api-ms-win-core-version-l1-1-0

api-ms-win-core-registry-l1-1-0

ws2_32

api-ms-win-core-com-l1-1-0

oleaut32

api-ms-win-core-util-l1-1-0

api-ms-win-core-handle-l1-1-0

api-ms-win-core-processthreads-l1-1-0

api-ms-win-core-libraryloader-l1-2-0

api-ms-win-core-libraryloader-l1-2-1

api-ms-win-security-base-l1-1-0

api-ms-win-core-string-obsolete-l1-1-0

api-ms-win-core-string-l2-1-0

api-ms-win-core-string-l1-1-0

api-ms-win-core-registry-l2-1-0

api-ms-win-service-management-l2-1-0

api-ms-win-service-management-l1-1-0

api-ms-win-service-winsvc-l1-1-0

api-ms-win-service-core-l1-1-0

api-ms-win-core-heap-l2-1-0

api-ms-win-core-localization-l1-2-0

api-ms-win-security-lsalookup-l2-1-0

api-ms-win-security-sddl-l1-1-0

api-ms-win-core-wow64-l1-1-0

crypt32

api-ms-win-core-file-l1-1-0

wintrust

api-ms-win-security-provider-l1-1-0

api-ms-win-core-processthreads-l1-1-1

api-ms-win-core-kernel32-legacy-l1-1-0

api-ms-win-core-synch-l1-2-1

api-ms-win-core-io-l1-1-0

api-ms-win-core-debug-l1-1-0

api-ms-win-core-io-l1-1-1

api-ms-win-core-heap-l1-1-0

rpcrt4

api-ms-win-power-setting-l1-1-0

api-ms-win-core-sysinfo-l1-2-0

ext-ms-win-shell32-shellfolders-l1-1-0

iphlpapi

api-ms-win-core-shutdown-l1-1-0

powrprof

api-ms-win-power-base-l1-1-0

api-ms-win-core-memory-l1-1-0

advapi32

user32

api-ms-win-core-interlocked-l1-1-0

api-ms-win-core-threadpool-legacy-l1-1-0

api-ms-win-core-systemtopology-l1-1-0

api-ms-win-core-processtopology-obsolete-l1-1-0

api-ms-win-core-rtlsupport-l1-1-0

api-ms-win-core-namedpipe-l1-1-0

api-ms-win-core-timezone-l1-1-0

api-ms-win-core-console-l1-1-0

api-ms-win-core-datetime-l1-1-0

generic