2026-09-10_a5d8e9a7b3939f8faff39502615c92fc_amadey_darkgate_elex_glassworm_smoke-loader

Sharing

Copy URL Twitter E-mail

General

Target
2026-09-10_a5d8e9a7b3939f8faff39502615c92fc_amadey_darkgate_elex_glassworm_smoke-loader
Size 44.7MB
Sample260910-pphbrswyft
SHA256 949a4dc2c107e00db523f0ab1e7508ed136b29326727e69b768cd84fcc67ccbc
MD5 a5d8e9a7b3939f8faff39502615c92fc
SHA1 9716c0969c78e3b1d4f00c9d04a283c351507c2b
SHA512 d629b94989a6b27b712b8ed6b6ec316d9c1b72e0cf934444883d838ea6ccef024a4d9d10dd7a6cf7550832187cc324e13a5acdda2a9a6cf116428e653cf6897c
SSDEEP 786432:99CeNOLrGcJOyhgzND/xLqUCe8sJuMR3lxEh9sWzzm81KttNvbrNE:99YqVyizN7xRCe8sew6Y
TLSH
T1F2A7120760AB58E0F2964032EB7F6A476F3EFCD56628CA56B1F245813871C35DC2E47A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-09-10_a5d8e9a7b3939f8faff39502615c92fc_amadey_darkgate_elex_glassworm_smoke-loader

File Explorer

2026-09-10_a5d8e9a7b3939f8faff39502615c92fc_amadey_darkgate_elex_glassworm_smoke-loader

.exe 44.7MB

2026-09-10_a5d8e9a7b3939f8faff39502615c92fc_amadey_darkgate_elex_glassworm_smoke-loader

IMPHASH ca0814e344cd535edb39522d8f2ce11f
SHA256 949a4dc2c107e00db523f0ab1e7508ed136b29326727e69b768cd84fcc67ccbc
MD5 a5d8e9a7b3939f8faff39502615c92fc
SHA1 9716c0969c78e3b1d4f00c9d04a283c351507c2b
SHA512 d629b94989a6b27b712b8ed6b6ec316d9c1b72e0cf934444883d838ea6ccef024a4d9d10dd7a6cf7550832187cc324e13a5acdda2a9a6cf116428e653cf6897c
SSDEEP 786432:99CeNOLrGcJOyhgzND/xLqUCe8sJuMR3lxEh9sWzzm81KttNvbrNE:99YqVyizN7xRCe8sew6Y
TLSH
T1F2A7120760AB58E0F2964032EB7F6A476F3EFCD56628CA56B1F245813871C35DC2E47A
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

38406720

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

Name

.text

Size

Virtual Size

638KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

Virtual Size

135KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

Virtual Size

23KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.fptable

Size

Virtual Size

128B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

5.8MB

Virtual Size

5.8MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.svmp1

Size

Virtual Size

13.2MB

Characteristics

IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.svmp2

Size

13.6MB

Virtual Size

13.6MB

Characteristics

IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.svmp3

Size

4.2MB

Virtual Size

4.2MB

Characteristics

IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.svmp4

Size

21.1MB

Virtual Size

21.1MB

Characteristics

IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

11KB

Virtual Size

11KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

2026-09-10_a5d8e9a7b3939f8faff39502615c92fc_amadey_darkgate_elex_glassworm_smoke-loader

d3d11

dwmapi

kernel32

user32

shell32

imm32

d3dcompiler_47

ws2_32

advapi32

ole32

oleaut32

comctl32

winmm

generic