2026-09-25_9f0160a536e5184a8a9319f85e67bc16_amadey_darkgate_elex_glassworm_smoke-loader

Sharing

Copy URL Twitter E-mail

General

Target
2026-09-25_9f0160a536e5184a8a9319f85e67bc16_amadey_darkgate_elex_glassworm_smoke-loader
Size 43.8MB
Sample260925-1x59caxfpc
SHA256 f482151f387504c1efca8d9f738988ee45f84d62aefca47615805bc79022c7ac
MD5 9f0160a536e5184a8a9319f85e67bc16
SHA1 24feef9fb3e2129b180f985058d9df47d842d229
SHA512 71c73607f68a6017da4a60abc15977cf2d2b9309ae260634466efcbc4a6454d6305b8dcee5ddf5a9d3e55b0eaef28f3b518307fcf516540fedaa832fb18f5bd4
SSDEEP 786432:JhZwK/yZoSjQwQPF88yoS7F0W7ZJ/7wxtxGThawYhcc13VlIyCx:JxaO88Lm7bTw/caOyC
TLSH
T170A70242B7BEEE74FC967F36212EB48B033DCD710A40D5E9318219867EA155B8CAD136
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-09-25_9f0160a536e5184a8a9319f85e67bc16_amadey_darkgate_elex_glassworm_smoke-loader

File Explorer

2026-09-25_9f0160a536e5184a8a9319f85e67bc16_amadey_darkgate_elex_glassworm_smoke-loader

.exe 43.8MB

2026-09-25_9f0160a536e5184a8a9319f85e67bc16_amadey_darkgate_elex_glassworm_smoke-loader

IMPHASH 8bed19d206e7631ea18652ee008f4c98
SHA256 f482151f387504c1efca8d9f738988ee45f84d62aefca47615805bc79022c7ac
MD5 9f0160a536e5184a8a9319f85e67bc16
SHA1 24feef9fb3e2129b180f985058d9df47d842d229
SHA512 71c73607f68a6017da4a60abc15977cf2d2b9309ae260634466efcbc4a6454d6305b8dcee5ddf5a9d3e55b0eaef28f3b518307fcf516540fedaa832fb18f5bd4
SSDEEP 786432:JhZwK/yZoSjQwQPF88yoS7F0W7ZJ/7wxtxGThawYhcc13VlIyCx:JxaO88Lm7bTw/caOyC
TLSH
T170A70242B7BEEE74FC967F36212EB48B033DCD710A40D5E9318219867EA155B8CAD136
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

27890976

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

Name

.text

Size

Virtual Size

1.8MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

Virtual Size

493KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

Virtual Size

115KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

37KB

Virtual Size

36KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.svmp1

Size

Virtual Size

9.6MB

Characteristics

IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.svmp2

Size

11.4MB

Virtual Size

11.4MB

Characteristics

IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.svmp3

Size

4.2MB

Virtual Size

4.2MB

Characteristics

IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.svmp4

Size

28.2MB

Virtual Size

28.2MB

Characteristics

IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

21KB

Virtual Size

21KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

2026-09-25_9f0160a536e5184a8a9319f85e67bc16_amadey_darkgate_elex_glassworm_smoke-loader

kernel32

user32

gdi32

msimg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

uxtheme

ole32

oleaut32

oledlg

oleacc

gdiplus

imm32

winmm

ws2_32

generic