2026-09-04_037c5017db89322e23c493f8a8d02467_darkgate_elex_luca-stealer_mespinoza_njrat_smoke-loader_wapomi

Sharing

Copy URL Twitter E-mail

General

Target
2026-09-04_037c5017db89322e23c493f8a8d02467_darkgate_elex_luca-stealer_mespinoza_njrat_smoke-loader_wapomi
Size 8.3MB
Sample260905-yebwnsysct
SHA256 40077e7271bf000de98e07145c0e064f933e4af6103e0e5b537b752b8d726eb9
MD5 037c5017db89322e23c493f8a8d02467
SHA1 0d01403fc0ed46719c0327e7291ca321aca095a4
SHA512 6d16e0ba51d2b3b2a850be1645f552e2f14bbcf3e49cf939b7a7bab8a6ed8ba95ac44bf49111f94daf1d16da7d3894c4625ae5ddcf30e48ee860f211f585f2aa
SSDEEP 49152:XqKrOGEu/sIeGulZ+9fLI8TPLuGLLJC9n8O2fKfo8/sDVZfw4104RtXjX1TG:aK56GulwBkiPLu8LJC9b2Sfo8/sL/
TLSH
T1529627526B729BD3F61301FD8A3AAE7920EC7E1357E1729727F43A0D69B12D13025932
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-09-04_037c5017db89322e23c493f8a8d02467_darkgate_elex_luca-stealer_mespinoza_njrat_smoke-loader_wapomi

File Explorer

2026-09-04_037c5017db89322e23c493f8a8d02467_darkgate_elex_luca-stealer_mespinoza_njrat_smoke-loader_wapomi

.exe 8.3MB

2026-09-04_037c5017db89322e23c493f8a8d02467_darkgate_elex_luca-stealer_mespinoza_njrat_smoke-loader_wapomi

IMPHASH 55ce09622efa29be29430d97690bb64d
SHA256 40077e7271bf000de98e07145c0e064f933e4af6103e0e5b537b752b8d726eb9
MD5 037c5017db89322e23c493f8a8d02467
SHA1 0d01403fc0ed46719c0327e7291ca321aca095a4
SHA512 6d16e0ba51d2b3b2a850be1645f552e2f14bbcf3e49cf939b7a7bab8a6ed8ba95ac44bf49111f94daf1d16da7d3894c4625ae5ddcf30e48ee860f211f585f2aa
SSDEEP 49152:XqKrOGEu/sIeGulZ+9fLI8TPLuGLLJC9n8O2fKfo8/sDVZfw4104RtXjX1TG:aK56GulwBkiPLu8LJC9b2Sfo8/sL/
TLSH
T1529627526B729BD3F61301FD8A3AAE7920EC7E1357E1729727F43A0D69B12D13025932
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

8761344

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

E:\mdz\VC Project\Gaming Mouse\21-10-26 GamingMouse 多彩 M820DC\Release\GamingMS.pdb

kernel32

QueryPerformanceFrequency VirtualQuery VirtualAlloc GetSystemInfo HeapQueryInformation GetFileType SetStdHandle GetModuleHandleExW GetStdHandle ExitThread CreateThread GetCommandLineW GetCommandLineA RtlUnwind OutputDebugStringW ExitProcess GetStringTypeW GetACP LCMapStringW GetConsoleCP ReadConsoleW GetConsoleMode SetFilePointerEx GetTimeZoneInformation FindFirstFileExW FindNextFileW IsValidCodePage GetOEMCP GetCPInfo GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableA GetStartupInfoW IsDebuggerPresent InitializeSListHead GetSystemTimeAsFileTime QueryPerformanceCounter WaitForSingleObjectEx ResetEvent IsProcessorFeaturePresent TerminateProcess SetUnhandledExceptionFilter UnhandledExceptionFilter SearchPathW GetProfileIntW GetTempPathW GetTempFileNameW VerifyVersionInfoW VerSetConditionMask GetWindowsDirectoryW GetTickCount FindResourceExW lstrcpyW SetErrorMode VirtualProtect GlobalGetAtomNameW GlobalFlags GetUserDefaultUILanguage GetSystemDefaultUILanguage GetLocaleInfoW CompareStringW LocalReAlloc LocalAlloc GlobalHandle GlobalReAlloc TlsFree TlsSetValue TlsGetValue TlsAlloc InitializeCriticalSection FileTimeToSystemTime SystemTimeToTzSpecificLocalTime GetFileTime GetFileSizeEx GetFileAttributesExW GetFileAttributesW FileTimeToLocalFileTime GetThreadLocale lstrcmpiW GetCurrentProcess DuplicateHandle WriteFile UnlockFile SetFilePointer SetEndOfFile LockFile GetVolumeInformationW GetFullPathNameW GetFileSize FlushFileBuffers FindFirstFileW FindClose DeleteFileW CopyFileW FormatMessageW MulDiv LocalFree GlobalSize GetCurrentProcessId ResumeThread SuspendThread SetThreadPriority CreateEventW WaitForSingleObject SetEvent WritePrivateProfileStringW GetPrivateProfileStringW GetPrivateProfileIntW GlobalFree GlobalFindAtomW GlobalAddAtomW LoadLibraryW LoadLibraryA GetProcAddress GetModuleHandleW GetModuleHandleA GetSystemDirectoryW SetLastError EncodePointer OutputDebugStringA lstrcmpW lstrcmpA GlobalDeleteAtom LoadLibraryExW FreeLibrary GetVersionExW GetCurrentThreadId GetCurrentThread FreeResource GlobalUnlock GlobalLock GlobalAlloc WideCharToMultiByte lstrlenA MultiByteToWideChar lstrlenW GetProcessHeap CreateMutexW DeleteCriticalSection DecodePointer HeapAlloc RaiseException HeapReAlloc HeapSize LeaveCriticalSection InitializeCriticalSectionAndSpinCount EnterCriticalSection HeapFree ReadFile Sleep CloseHandle CreateFileW GetCurrentDirectoryW WinExec GetModuleFileNameW FindResourceW LoadResource LockResource SizeofResource GetLastError FreeLibraryAndExitThread WriteConsoleW

user32

MapVirtualKeyW GetKeyNameTextW CharUpperW GetMenuItemInfoW DestroyMenu InflateRect IsDialogMessageW SetWindowTextW CheckDlgButton MoveWindow ShowWindow ClientToScreen GetWindowDC TabbedTextOutW GrayStringW DrawTextExW DrawTextW RemoveMenu InsertMenuW GetMenuState GetMenuStringW GetWindowThreadProcessId SetCursor ShowOwnedPopups TranslateMessage GetMessageW SetMenuItemInfoW GetMenuCheckMarkDimensions SetMenuItemBitmaps EnableMenuItem CheckMenuItem GetDesktopWindow IsWindowEnabled GetActiveWindow GetNextDlgTabItem EndDialog CreateDialogIndirectParamW MapDialogRect SetWindowContextHelpId GetMonitorInfoW MonitorFromWindow WinHelpW GetScrollInfo SetScrollInfo CallNextHookEx SetWindowsHookExW GetWindow LoadMenuW GetTopWindow GetClassNameW GetClassLongW EqualRect GetSysColor MapWindowPoints MessageBoxW AdjustWindowRectEx GetWindowTextLengthW GetWindowTextW RemovePropW GetPropW SetPropW ShowScrollBar GetScrollRange SetScrollRange GetScrollPos SetScrollPos ScrollWindow RedrawWindow ValidateRect EndPaint BeginPaint GetMenuDefaultItem TrackPopupMenu GetMenuItemCount GetMenuItemID GetSubMenu UnionRect GetSystemMenu SetParent FindWindowW SendMessageW GetClassInfoW LoadIconW GetSystemMetrics SetMenu GetMenu GetCapture GetKeyState GetFocus SetFocus GetDlgCtrlID GetDlgItem IsWindowVisible EndDeferWindowPos DeferWindowPos BeginDeferWindowPos SetWindowPlacement GetWindowPlacement DestroyWindow WaitMessage WindowFromPoint CopyImage DeleteMenu RealChildWindowFromPoint SendDlgItemMessageA SetRectEmpty OffsetRect GetSysColorBrush GetAsyncKeyState CharNextW CopyAcceleratorTableW InvalidateRgn GetNextDlgGroupItem MessageBeep IsChild IsMenu CreateWindowExW DestroyIcon BringWindowToTop LoadAcceleratorsW TranslateAcceleratorW InsertMenuItemW GetLastActivePopup LoadImageW GetDC GetClientRect SetTimer IsIconic DrawIcon SetRect InvalidateRect KillTimer GetWindowRect SetForegroundWindow PostMessageW LoadBitmapW SystemParametersInfoW GetComboBoxInfo RegisterDeviceNotificationW GetWindowLongW SetWindowLongW SetLayeredWindowAttributes SetWindowPos GetCursorPos CreatePopupMenu AppendMenuW EnableWindow GetParent UnregisterClassW PtInRect FillRect UpdateWindow CopyRect ReleaseDC SetWindowRgn IsRectEmpty IntersectRect IsZoomed ScreenToClient SetCapture ReleaseCapture IsWindow LoadCursorW UpdateLayeredWindow PostQuitMessage UnhookWindowsHookEx RegisterWindowMessageW DrawFocusRect DrawIconEx GetIconInfo EnableScrollBar UnpackDDElParam ReuseDDElParam TrackMouseEvent GetForegroundWindow RegisterClipboardFormatW DispatchMessageW PeekMessageW GetMessagePos GetMessageTime DefWindowProcW CallWindowProcW RegisterClassW GetClassInfoExW HideCaret InvertRect NotifyWinEvent EnumDisplayMonitors SetClassLongW OpenClipboard CloseClipboard SetClipboardData EmptyClipboard DrawStateW DrawEdge DrawFrameControl SetCursorPos CopyIcon FrameRect PostThreadMessageW LockWindowUpdate MonitorFromPoint DestroyCursor GetWindowRgn CreateMenu SubtractRect TranslateMDISysAccel DefMDIChildProcW DefFrameProcW DrawMenuBar GetUpdateRect IsClipboardFormatAvailable CharUpperBuffW ModifyMenuW GetDoubleClickTime SetMenuDefaultItem DestroyAcceleratorTable CreateAcceleratorTableW GetKeyboardState ToUnicodeEx MapVirtualKeyExW IsCharLowerW GetKeyboardLayout SetActiveWindow

gdi32

CreateSolidBrush SetPixel GetStockObject CreateFontIndirectW CreateRectRgn CombineRgn CreateDCW CreateHatchBrush CreatePen CreatePatternBrush Escape ExcludeClipRect GetClipBox GetObjectType GetViewportExtEx GetWindowExtEx IntersectClipRect LineTo PtVisible RectVisible RestoreDC SaveDC SelectClipRgn ExtSelectClipRgn SelectPalette SetBkMode SetMapMode SetLayout GetLayout SetPolyFillMode SetROP2 SetTextAlign MoveToEx TextOutW ExtTextOutW SetViewportExtEx SetViewportOrgEx SetWindowExtEx GetPixel OffsetViewportOrgEx OffsetWindowOrgEx ScaleViewportExtEx ScaleWindowExtEx CreateRectRgnIndirect GetMapMode PatBlt SetRectRgn DPtoLP GetTextExtentPoint32W GetBkColor GetTextColor GetRgnBox GetTextMetricsW EnumFontFamiliesExW CreatePalette GetNearestPaletteIndex GetPaletteEntries GetSystemPaletteEntries RealizePalette CreateDIBitmap EnumFontFamiliesW GetTextCharsetInfo CreateDIBSection SetDIBColorTable CreateEllipticRgn Ellipse Polygon Polyline CreateRoundRectRgn LPtoDP Rectangle OffsetRgn RoundRect FillRgn FrameRgn GetBoundsRect ExtFloodFill SetPaletteEntries SetPixelV GetWindowOrgEx GetViewportOrgEx GetTextFaceW PtInRegion CreatePolygonRgn SetTextColor SetBkColor SelectObject CreateBitmap GetDIBits GetObjectW DeleteDC BitBlt CreateFontW CreateCompatibleBitmap DeleteObject StretchBlt CreateCompatibleDC SetWindowOrgEx CopyMetaFileW GetDeviceCaps

msimg32

TransparentBlt AlphaBlend

winspool.drv

ClosePrinter DocumentPropertiesW OpenPrinterW

advapi32

RegQueryValueW RegOpenKeyExW RegEnumKeyExW RegEnumValueW RegCloseKey RegEnumKeyW RegSetValueExW RegDeleteValueW RegDeleteKeyW RegCreateKeyExW RegQueryValueExW

shell32

Shell_NotifyIconW SHGetFileInfoW DragQueryFileW DragFinish SHAppBarMessage SHBrowseForFolderW ShellExecuteW SHGetDesktopFolder SHGetSpecialFolderLocation SHGetPathFromIDListW

comctl32

InitCommonControlsEx _TrackMouseEvent

shlwapi

PathFindFileNameW PathRemoveFileSpecW PathIsUNCW PathStripToRootW PathFindExtensionW StrFormatKBSizeW

uxtheme

GetCurrentThemeName GetThemeSysColor DrawThemeText DrawThemeBackground IsThemeBackgroundPartiallyTransparent DrawThemeParentBackground OpenThemeData CloseThemeData GetThemeColor GetWindowTheme GetThemePartSize IsAppThemed

ole32

OleTranslateAccelerator OleDestroyMenuDescriptor OleCreateMenuDescriptor OleLockRunning RevokeDragDrop RegisterDragDrop CoLockObjectExternal OleGetClipboard DoDragDrop CoRegisterMessageFilter OleIsCurrentClipboard OleFlushClipboard CoRevokeClassObject OleUninitialize OleInitialize CoFreeUnusedLibraries CreateILockBytesOnHGlobal StgOpenStorageOnILockBytes StgCreateDocfileOnILockBytes CoGetClassObject CoDisconnectObject CoInitializeEx ReleaseStgMedium OleDuplicateData CoTaskMemFree CoTaskMemAlloc CoInitialize CoCreateInstance CLSIDFromProgID CLSIDFromString CoCreateGuid CoUninitialize IsAccelerator CreateStreamOnHGlobal

oleaut32

VariantClear VariantInit SysAllocStringLen SysFreeString SysAllocString SysStringLen VariantChangeType VariantCopy VarBstrFromDate SystemTimeToVariantTime VariantTimeToSystemTime SafeArrayDestroy LoadTypeLi OleCreateFontIndirect

oledlg

OleUIBusyW

gdiplus

GdipReleaseDC GdipDrawImageRectI GdipCreateBitmapFromHBITMAP GdipDrawImageI GdipBitmapUnlockBits GdipBitmapLockBits GdipCreateBitmapFromScan0 GdiplusStartup GdiplusShutdown GdipCreateFromHDC GdipDeleteGraphics GdipSetInterpolationMode GdipSetPixelOffsetMode GdipLoadImageFromFileICM GdipFree GdipAlloc GdipCloneImage GdipGetImageHeight GdipGetImageWidth GdipDrawImageRectRect GdipDisposeImage GdipCreateBitmapFromFile GdipCreateHBITMAPFromBitmap GdipLoadImageFromStream GdipNewPrivateFontCollection GdipDeletePrivateFontCollection GdipDeleteFontFamily GdipGetImageGraphicsContext GdipGetImagePixelFormat GdipGetImagePalette GdipGetImagePaletteSize GdipCreateBitmapFromStream

winmm

PlaySoundW

keyboardhook

??1CKeyboardHook@@UAE@XZ ?StartHook@CKeyboardHook@@QAEHPAUHWND__@@@Z ?StopHook@CKeyboardHook@@QAEHXZ ??0CKeyboardHook@@QAE@XZ

hid

HidD_GetHidGuid HidD_GetPreparsedData HidP_GetCaps HidD_FreePreparsedData HidD_SetFeature HidD_GetFeature HidD_GetAttributes

setupapi

SetupDiGetClassDevsW SetupDiDestroyDeviceInfoList SetupDiGetDeviceInterfaceDetailW SetupDiEnumDeviceInterfaces

oleacc

AccessibleObjectFromWindow LresultFromObject CreateStdAccessibleObject

imm32

ImmGetContext ImmGetOpenStatus ImmReleaseContext

Name

.text

Size

1.9MB

Virtual Size

1.9MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

398KB

Virtual Size

398KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

25KB

Virtual Size

62KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.gfids

Size

106KB

Virtual Size

106KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.giats

Size

512B

Virtual Size

16B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

512B

Virtual Size

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

5.7MB

Virtual Size

5.7MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

159KB

Virtual Size

159KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

�a@�us

Size

16KB

Virtual Size

20KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

generic

count=22, id=241, version=40116,

count=172, id=243, version=40116,

count=29, id=242, version=40116,

count=4, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,

count=2, id=147, productName=VS2008 build 21022, version=21022,

count=2, id=261, version=23013,

count=1, id=132, productName=VS2008 SP1 build 30729, version=30729,

count=15, id=131, productName=VS2008 SP1 build 30729, version=30729,

count=35, id=147, productName=VS2008 SP1 build 30729, version=30729,

count=804, id=1, productName=Unmarked objects,

count=23, id=259, version=24123,

count=20, id=260, version=24123,

count=358, id=261, version=24123,

count=66, id=265, version=24215,

count=1, id=255, productName=VS2015 UPD3 build 24210, version=24210,

count=1, id=151,

count=1, id=258, productName=VS2015 UPD3.1 build 24215, version=24215,