2026-08-24_15524695c55a0439f119c8740ae476fd_amadey_cloudeye_darkgate_elex_smoke-loader_stop

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-24_15524695c55a0439f119c8740ae476fd_amadey_cloudeye_darkgate_elex_smoke-loader_stop
Size 1.9MB
Sample260825-w7msjadn2x
SHA256 686b083555d160d84a76ba734453364e45e6cb8163df0cc76992a0daf1d211ea
MD5 15524695c55a0439f119c8740ae476fd
SHA1 b95484f78078e72b5c223b02a44c949dde455fc4
SHA512 5f83909a8418b6088c3385e4fff48f1b6ce7cb3a6556f9992ebfcd31d0de41be43f543633f2a95a4e5980f5dd7c9ee71643a0c0bc3a13553291ee25ef4f68ada
SSDEEP 12288:iaYeiveC8omNZHsyClgmw6zxV7NDEpUE9QDV9U11SVqLcuzkB/X/2xlsxjbN3FFx:mw/rhAucuzKPgssStPUvgB
TLSH
T126951803E6E5C029F0B32A709D798BA45A77BD60AD35857BE2C33B5D1E70AC39521327
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-24_15524695c55a0439f119c8740ae476fd_amadey_cloudeye_darkgate_elex_smoke-loader_stop

File Explorer

2026-08-24_15524695c55a0439f119c8740ae476fd_amadey_cloudeye_darkgate_elex_smoke-loader_stop

.exe 1.9MB

2026-08-24_15524695c55a0439f119c8740ae476fd_amadey_cloudeye_darkgate_elex_smoke-loader_stop

IMPHASH adeeb7592acbc370f45cb82ee948d147
SHA256 686b083555d160d84a76ba734453364e45e6cb8163df0cc76992a0daf1d211ea
MD5 15524695c55a0439f119c8740ae476fd
SHA1 b95484f78078e72b5c223b02a44c949dde455fc4
SHA512 5f83909a8418b6088c3385e4fff48f1b6ce7cb3a6556f9992ebfcd31d0de41be43f543633f2a95a4e5980f5dd7c9ee71643a0c0bc3a13553291ee25ef4f68ada
SSDEEP 12288:iaYeiveC8omNZHsyClgmw6zxV7NDEpUE9QDV9U11SVqLcuzkB/X/2xlsxjbN3FFx:mw/rhAucuzKPgssStPUvgB
TLSH
T126951803E6E5C029F0B32A709D798BA45A77BD60AD35857BE2C33B5D1E70AC39521327
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

314688

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

appvisvsubsystems32

ord1

kernel32

GetStringTypeA GetFileType FlushFileBuffers WriteFile GetStdHandle GetOEMCP SetHandleCount CompareStringW GetStringTypeW SetStdHandle GetEnvironmentStrings RaiseException IsBadReadPtr lstrlenA lstrcpyA MulDiv LocalAlloc OutputDebugStringA lstrcmpiA GlobalSize GlobalReAlloc GlobalAlloc GlobalLock GetEnvironmentStringsW FreeEnvironmentStringsW GetCurrentProcess FreeEnvironmentStringsA UnhandledExceptionFilter CloseHandle TerminateProcess ExitProcess HeapCreate VirtualAlloc VirtualFree LCMapStringA HeapDestroy LCMapStringW GetStartupInfoA RtlUnwind GetCommandLineA HeapFree GetModuleHandleA HeapAlloc GetLocalTime MoveFileA GetLastError SetErrorMode GetSystemTime GetTimeZoneInformation WinExec GetSystemDefaultLangID GetCPInfo GetLocaleInfoA WideCharToMultiByte GetSystemDirectoryA LockResource MultiByteToWideChar SizeofResource LoadResource FreeResource FindResourceA _lread SetEndOfFile SetFilePointer _lclose _lwrite OpenFile GetModuleFileNameA _llseek GetWindowsDirectoryA GlobalFlags GetTickCount FatalAppExitA SetEnvironmentVariableA LocalLock LocalReAlloc GlobalUnlock LocalUnlock GetProcAddress LocalFree GetACP GetVersion FreeLibrary LoadLibraryA GlobalHandle GetProfileStringA lstrcmpA HeapReAlloc IsDBCSLeadByte GlobalFree ReadFile CreateFileA CompareStringA

user32

InvalidateRect SendDlgItemMessageA GetDialogBaseUnits IsDlgButtonChecked CheckDlgButton GetNextDlgTabItem SetScrollRange SetDlgItemTextA GetDlgItemTextA MapWindowPoints CheckRadioButton GetDoubleClickTime ReleaseCapture SetCapture RegisterClassW SetMenu SetWindowTextA GetWindowTextA InvalidateRgn ScrollDC IsZoomed AppendMenuA GetSystemMenu GetClassLongA GetClassLongW DispatchMessageA DispatchMessageW GetMessageW GetMessageA DefWindowProcW VkKeyScanA GetKeyboardLayout LoadKeyboardLayoutA ActivateKeyboardLayout GetKeyboardLayoutList InvertRect GetMenuCheckMarkDimensions RegisterClipboardFormatA CloseClipboard EmptyClipboard OpenClipboard IsClipboardFormatAvailable GetClipboardData SetClipboardData HiliteMenuItem GetMenuState GetMenuItemID DeleteMenu DrawMenuBar EqualRect UnionRect GetDesktopWindow GetMessagePos GetMessageTime SetParent GetClassInfoA SetWindowPos MessageBoxA DialogBoxParamA BringWindowToTop OffsetRect GetCaretBlinkTime SetTimer MessageBeep WinHelpA CreateDialogParamA SendMessageA GetAsyncKeyState EnableWindow GetScrollPos GetScrollRange SetScrollPos SetCursor PtInRect ShowCursor IsWindowVisible GetMenuItemCount LoadStringA IsWindowUnicode UpdateWindow GetMenu FindWindowA GetKeyState PeekMessageA KillTimer DefWindowProcA LoadIconA LoadCursorA IsDialogMessageA GetFocus BeginPaint EndPaint ScreenToClient SetRect FillRect IntersectRect CopyRect SetWindowLongA MoveWindow DestroyWindow CheckMenuItem SetRectEmpty RemoveMenu GetSubMenu CreateMenu EnableMenuItem GetMenuStringA ModifyMenuA InsertMenuA GetParent TranslateMessage SetForegroundWindow SetFocus PostQuitMessage PostMessageA CreateWindowExA RegisterClassA GetDC LoadMenuA IsIconic GetWindowLongA ClientToScreen GetWindowRect GetClassNameA DestroyMenu IsRectEmpty IsWindow ShowWindow LoadBitmapA GetSysColor GetDlgItem GetClientRect DrawTextA wsprintfA GetSystemMetrics GetWindowDC ReleaseDC EndDialog InflateRect GetCursorPos GetActiveWindow

gdi32

CreateCompatibleBitmap CreateFontIndirectA LineTo SetBkMode GetStockObject CreatePen MoveToEx BitBlt DeleteMetaFile GetObjectA GetDeviceCaps SetBkColor CopyMetaFileA PatBlt CreatePatternBrush SetTextColor PtVisible GetTextFaceA CreateBitmap ExtTextOutA SetMapMode CreateFontA GetCharWidthA GetCharWidth32A GetMapMode GetCharWidth32W GetBitmapBits GetCharWidthW TextOutW SetTextAlign TextOutA Escape CreateICA GetTextMetricsA EnumFontFamiliesExA CreateSolidBrush EnumFontsA SelectClipRgn SetRectRgn CreateRectRgn GetClipBox RectVisible CreateRectRgnIndirect Ellipse Polygon SetROP2 SetMapperFlags ExtTextOutW Arc SetWindowExtEx SetWindowOrgEx GetTextExtentPoint32A CloseMetaFile RestoreDC CreateMetaFileA SaveDC StretchBlt EnumMetaFile PlayMetaFile SetViewportExtEx SetStretchBltMode FillRgn CombineRgn GetMetaFileBitsEx Rectangle DeleteDC CreateCompatibleDC DeleteObject SelectObject

advapi32

RegEnumKeyExA RegEnumValueA RegCloseKey RegQueryValueExA RegOpenKeyExA RegCreateKeyExA RegQueryInfoKeyA RegSetValueExA RegDeleteKeyA RegOpenKeyA

ole32

CreateDataAdviseHolder StgCreateDocfileOnILockBytes CreateILockBytesOnHGlobal GetHGlobalFromILockBytes CoDisconnectObject CoLockObjectExternal OleUninitialize CoRegisterMessageFilter CoRevokeClassObject CoRegisterClassObject OleInitialize CreateOleAdviseHolder OleRegEnumFormatEtc ReleaseStgMedium WriteFmtUserTypeStg OleTranslateAccelerator OleCreateMenuDescriptor OleDestroyMenuDescriptor GetRunningObjectTable CoGetMalloc OleDuplicateData OleGetClipboard WriteClassStg OleFlushClipboard OleSetClipboard

shell32

DragAcceptFiles

comctl32

ord17

Name

.text

Size

328KB

Virtual Size

324KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

4KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

28KB

Virtual Size

69KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

12KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

128KB

Virtual Size

124KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

20KB

Virtual Size

17KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-24_15524695c55a0439f119c8740ae476fd_amadey_cloudeye_darkgate_elex_smoke-loader_stop

appvisvsubsystems32

kernel32

user32

gdi32

advapi32

ole32

shell32

comctl32

generic