2026-09-25_d30e7d42b2aed38a9e6cea1c803bd976_amadey_darkgate_elex_glassworm_luca-stealer_magniber_njrat_smoke-loader

Sharing

Copy URL Twitter E-mail

General

Target
2026-09-25_d30e7d42b2aed38a9e6cea1c803bd976_amadey_darkgate_elex_glassworm_luca-stealer_magniber_njrat_smoke-loader
Size 9.0MB
Sample260925-xygetsvckc
SHA256 f8978cfc7e21ea58b1b4249e66ae060ad4c354fc1fcca380f827dedaae64ede7
MD5 d30e7d42b2aed38a9e6cea1c803bd976
SHA1 c1b0dd45cd27045be363b415e2764514a1b48521
SHA512 f5729b647a7b5cf0191a08c46093ff20dc39d27215fe9bdd1e0b8eaa962652c865834199f13bfda95484f6b1d713ec6fa332581e36874fdf854a827206e22e39
SSDEEP 196608:4xC5CHLbwfwoe7o/UclKZA2FqcYLApB7RiF:4Tw78c5GvYLApxQ
TLSH
T1EF96BF207A01C035EE9211B2E97CBEBF542DD6340B7804C792DC5ABE5A706D32F76A5B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

revoked_codesign

Malware Config

Signatures

Revoked Certificate in Chain 1 IoCs

One or more certificates in the signing chain have been revoked, indicating potential compromise.

revoked_codesign

resource
2026-09-25_d30e7d42b2aed38a9e6cea1c803bd976_amadey_darkgate_elex_glassworm_luca-stealer_magniber_njrat_smoke-loader

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
2026-09-25_d30e7d42b2aed38a9e6cea1c803bd976_amadey_darkgate_elex_glassworm_luca-stealer_magniber_njrat_smoke-loader

File Explorer

2026-09-25_d30e7d42b2aed38a9e6cea1c803bd976_amadey_darkgate_elex_glassworm_luca-stealer_magniber_njrat_smoke-loader

.exe 9.0MB

2026-09-25_d30e7d42b2aed38a9e6cea1c803bd976_amadey_darkgate_elex_glassworm_luca-stealer_magniber_njrat_smoke-loader

IMPHASH cf40dd8739c4cb56a61ade24043d1a26
SHA256 f8978cfc7e21ea58b1b4249e66ae060ad4c354fc1fcca380f827dedaae64ede7
MD5 d30e7d42b2aed38a9e6cea1c803bd976
SHA1 c1b0dd45cd27045be363b415e2764514a1b48521
SHA512 f5729b647a7b5cf0191a08c46093ff20dc39d27215fe9bdd1e0b8eaa962652c865834199f13bfda95484f6b1d713ec6fa332581e36874fdf854a827206e22e39
SSDEEP 196608:4xC5CHLbwfwoe7o/UclKZA2FqcYLApB7RiF:4Tw78c5GvYLApxQ
TLSH
T1EF96BF207A01C035EE9211B2E97CBEBF542DD6340B7804C792DC5ABE5A706D32F76A5B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Revoked Certificate in Chain

One or more certificates in the signing chain have been revoked, indicating potential compromise.

revoked_codesign
Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

13:a0:e6:b9:d7:4c:3d:62:99:9b:9e:67:62:25:b3:ad:ad:70:7c:5d:0b:a2:29:2b:16:b0:05:53:fc:fd:88:d2

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

SERIALNUMBER=92371323MAKJLYRF26,CN=Xidao E-commerce Studio\, Yishui County,O=Xidao E-commerce Studio\, Yishui County,L=临沂市,ST=山东省,C=CN,1.3.6.1.4.1.311.60.2.1.1=#0c09e4b8b4e6b282e5b882,1.3.6.1.4.1.311.60.2.1.2=#0c09e5b1b1e4b89ce79c81,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#130f427573696e65737320456e74697479

Chains

Sep 10, 2026

CN=Certum Extended Validation Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL

CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

CN=Certum Extended Validation Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL

CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Subject

CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Serial Number

61:3b:c7:91:00:00:00:00:00:34

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Apr 15, 2011 - Apr 15, 2021

Subject

CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Serial Number

1b:b5:8f:25:2a:df:23:00:49:28:c9:ae:3d:7e:ed:27

Issuer

CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

May 31, 2021 - Sep 17, 2029

Subject

CN=Certum Extended Validation Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL

Serial Number

bb:f0:cc:b5:b7:b8:31:fd:21:ae:32:77:8a:e4:0c:89

Issuer

CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

May 19, 2021 - May 18, 2036

Subject

Serial Number

78:36:fc:68:1a:ae:72:e8:28:15:b7:a3:65:4d:bf:01

Issuer

CN=Certum Extended Validation Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Revoked

Revocation Date

Sep 22, 2026

Timespan

Aug 25, 2026 - Aug 25, 2027

Subject

CN=DigiCert SHA256 RSA4096 Timestamp Responder 2026 1,O=DigiCert\, Inc.,C=US

Serial Number

08:4f:dc:33:4f:7e:45:4e:db:c3:0f:8f:f9:92:18:35

Issuer

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Aug 5, 2026 - Nov 4, 2037

Subject

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Serial Number

0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

May 7, 2025 - Jan 14, 2038

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

Major OS version

Entry point

5221042

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

roccavpn.pdb

wldap32

ord211 ord60 ord45 ord217 ord46 ord41 ord22 ord26 ord27 ord32 ord33 ord35 ord79 ord30 ord200 ord301 ord50 ord143

bcrypt

BCryptFinishHash BCryptHashData BCryptCreateHash BCryptGenerateSymmetricKey BCryptSetProperty BCryptCloseAlgorithmProvider BCryptGenRandom BCryptOpenAlgorithmProvider BCryptDecrypt BCryptGetProperty BCryptDestroyKey BCryptDestroyHash BCryptEncrypt

advapi32

CryptCreateHash StartServiceW ControlService RegDeleteValueW RegSetValueExW RegCreateKeyExW RegQueryValueExW RegOpenKeyExW QueryServiceStatusEx CloseServiceHandle OpenServiceW OpenSCManagerW RegCloseKey RegQueryValueExA RegCreateKeyExA RegSetValueExA RegOpenKeyExA DeleteService CreateServiceW ChangeServiceConfigW ChangeServiceConfig2W CryptAcquireContextA CryptReleaseContext CryptDestroyHash CryptHashData QueryServiceConfigW CryptGetHashParam

crypt32

CryptStringToBinaryA CryptBinaryToStringA CertOpenStore CertCloseStore CertEnumCertificatesInStore CertFindCertificateInStore CertFreeCertificateContext PFXImportCertStore CryptDecodeObjectEx CertFreeCertificateChain CertAddCertificateContextToStore CertFreeCTLContext CertFindExtension CertGetNameStringA CryptQueryObject CertCreateCertificateChainEngine CertFreeCertificateChainEngine CertGetCertificateChain CertFreeCRLContext

secur32

InitSecurityInterfaceA

ws2_32

gethostname ioctlsocket sendto recvfrom htonl listen freeaddrinfo getaddrinfo select __WSAFDIsSet WSAIoctl WSASetLastError inet_pton getsockopt send WSACloseEvent WSACreateEvent WSAEnumNetworkEvents WSAEventSelect WSAResetEvent WSASetEvent WSAWaitForMultipleEvents WSAGetLastError ntohs WSAStartup WSACleanup accept bind closesocket connect getpeername getsockname htons recv setsockopt socket

iphlpapi

IcmpCloseHandle IcmpCreateFile if_nametoindex IcmpSendEcho

kernel32

FreeLibrary SetEnvironmentVariableA FindFirstFileW SetLastError FindNextFileW RemoveDirectoryW FindClose WaitForSingleObject OpenProcess SetFilePointerEx CreateProcessW MulDiv GetTickCount SetCurrentDirectoryW GetCommandLineW CreateMutexW GetCurrentDirectoryW ReleaseSRWLockExclusive AcquireSRWLockExclusive FormatMessageA SleepEx EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection QueryPerformanceCounter QueryPerformanceFrequency InitializeConditionVariable CreateFileA GetFullPathNameW MoveFileExA GetEnvironmentVariableA GetModuleHandleA VerSetConditionMask VerifyVersionInfoW GetStdHandle GetFileType PeekNamedPipe WaitForMultipleObjects WakeConditionVariable SleepConditionVariableCS WaitForSingleObjectEx CreateThread FindFirstFileA GetVersionExW OutputDebugStringA GetLocalTime GetConsoleWindow HeapAlloc HeapFree GetProcessHeap HeapCreate GetSystemTime FlushInstructionCache GetVersionExA GetModuleHandleW FreeResource LoadResource LockResource SizeofResource FindResourceW EnumResourceNamesW EnumResourceTypesW IsBadReadPtr LoadLibraryA GlobalAlloc GlobalUnlock GlobalLock InitializeCriticalSection ReleaseSemaphore CreateSemaphoreW GetSystemTimeAsFileTime GetModuleFileNameA GetModuleHandleExA GetConsoleScreenBufferInfo SetConsoleTextAttribute lstrcmpiA GetFileInformationByHandle CreateFileMappingW MapViewOfFile UnmapViewOfFile TlsAlloc TlsGetValue TlsSetValue CompareFileTime LocalFileTimeToFileTime LoadLibraryW GetSystemInfo GlobalMemoryStatus GetProcessAffinityMask VirtualAlloc VirtualFree FileTimeToLocalFileTime FileTimeToDosDateTime DosDateTimeToFileTime IsProcessorFeaturePresent GetVersion GetOEMCP SetEvent ResetEvent CreateEventW ResumeThread SetThreadAffinityMask GetFileSize SetEndOfFile SetFilePointer SetFileTime GetTempPathW GetSystemDirectoryW MoveFileW MoveFileWithProgressW CreateHardLinkW FindCloseChangeNotification FindFirstChangeNotificationW GetLogicalDriveStringsW lstrcpyW lstrlenA HeapSize WriteConsoleW CreateEventExW OutputDebugStringW SetEnvironmentVariableW MoveFileExW DeleteFileW CopyFileW GetCurrentThreadId FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineA GetCurrentProcessId Sleep GetFileAttributesW GetWindowsDirectoryW GetACP IsValidCodePage FindFirstFileExW GetFileAttributesExW GetTimeZoneInformation HeapReAlloc EnumSystemLocalesW GetUserDefaultLCID IsValidLocale GetLocaleInfoW LCMapStringW TryAcquireSRWLockExclusive SwitchToThread GetExitCodeThread GetNativeSystemInfo GetStringTypeW EncodePointer DecodePointer GetLocaleInfoEx LCMapStringEx WakeAllConditionVariable SleepConditionVariableSRW SetFileInformationByHandle InitOnceExecuteOnce CompareStringW GetTimeFormatW GetDateFormatW VirtualProtect IsThreadAFiber FlsFree FlsSetValue FlsGetValue FlsAlloc LocalFree FlushFileBuffers WriteFile ReadFile CloseHandle GetFileSizeEx CreateFileW SetFileAttributesW CreateDirectoryW MultiByteToWideChar GetLastError WideCharToMultiByte GetDynamicTimeZoneInformation lstrlenW GetProcAddress FormatMessageW GetTickCount64 GetCurrentProcess GetModuleFileNameW CreateSemaphoreExW FlushProcessWriteBuffers GetCurrentProcessorNumber FreeLibraryWhenCallbackReturns CreateThreadpoolTimer SetThreadpoolTimer WaitForThreadpoolTimerCallbacks CloseThreadpoolTimer CreateThreadpoolWait SetThreadpoolWait CloseThreadpoolWait GetFileInformationByHandleEx CreateSymbolicLinkW CompareStringEx GetCPInfo UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess IsDebuggerPresent GetStartupInfoW InitializeSListHead RtlUnwind RaiseException InterlockedPushEntrySList InterlockedFlushSList InitializeCriticalSectionAndSpinCount TlsFree LoadLibraryExW ExitThread FreeLibraryAndExitThread GetModuleHandleExW GetDriveTypeW SystemTimeToTzSpecificLocalTime FileTimeToSystemTime GetConsoleMode ReadConsoleW GetConsoleOutputCP SetConsoleCtrlHandler GetCurrentThread SetStdHandle ExitProcess HeapDestroy

user32

CharUpperW SystemParametersInfoW DrawIconEx InflateRect SetRect FillRect InvertRect GetDesktopWindow SetActiveWindow EnableWindow CheckMenuRadioItem GetMenuContextHelpId SetMenuContextHelpId SetMenuInfo GetMenuInfo TrackPopupMenu DeleteMenu AppendMenuW InsertMenuW GetSubMenu DestroyMenu CreatePopupMenu LoadImageW LoadBitmapW MapVirtualKeyW CharLowerBuffW SystemParametersInfoA IntersectRect DrawTextW GetWindowPlacement PtInRect CallNextHookEx UnhookWindowsHookEx SetWindowsHookExW GetSysColor MsgWaitForMultipleObjects PostThreadMessageW PeekMessageW DispatchMessageW TranslateMessage SetCaretPos OffsetRect DestroyCursor GetKeyState GetFocus GetForegroundWindow CallMsgFilterW PostQuitMessage WindowFromPoint LoadCursorW GetWindow SetParent GetParent SetWindowLongW GetWindowLongW MapWindowPoints ScreenToClient ClientToScreen ShowCaret HideCaret CreateCaret GetWindowTextW SetWindowTextW InvalidateRect SetWindowRgn CharPrevExA IsWindowEnabled ReleaseCapture SetCapture GetCapture GetDlgCtrlID GetDlgItem IsZoomed IsIconic IsWindowVisible MoveWindow UpdateLayeredWindow ShowWindow CreateWindowExW RegisterClassExW UnregisterClassW CallWindowProcW DefWindowProcW SendNotifyMessageW SendMessageW GetMonitorInfoW MonitorFromWindow GetClassNameW GetClientRect EndPaint BeginPaint UpdateWindow GetMenuItemInfoW GetMenuItemCount GetMenuItemID EnableMenuItem CheckMenuItem GetMenuStringW SetFocus SetWindowPos SetLayeredWindowAttributes AnimateWindow IsMenu TrackMouseEvent GetIconInfo CharNextW DestroyWindow IsWindow IsRectEmpty SetCursor CreateIconIndirect CreateIconFromResource GetSystemMetrics LoadStringA MonitorFromRect GetWindowRect ReleaseDC GetDC LoadStringW SetPropW GetActiveWindow AllowSetForegroundWindow GetWindowThreadProcessId EnumWindows GetPropW DestroyIcon RegisterWindowMessageW GetCursorPos SetForegroundWindow BringWindowToTop KillTimer PostMessageW GetWindowDC OemToCharBuffW SetTimer

gdi32

Arc GetTextMetricsW SetROP2 SetPixel GetPixel SetViewportOrgEx CreateCompatibleBitmap GetDCOrgEx SetBkMode Rectangle GetStockObject CreateSolidBrush CreateFontIndirectW SetGraphicsMode StretchBlt RectInRegion ExcludeClipRect CreateRectRgnIndirect BitBlt GetClipBox CreateDIBSection StretchDIBits SelectObject DeleteObject DeleteDC CreateDCW CreateCompatibleDC CreateBitmap GetObjectW EnumFontsW ExtCreateRegion CombineRgn CreateDIBPatternBrushPt CreateEllipticRgnIndirect CreatePen CreatePatternBrush CreateRectRgn CreateRoundRectRgn Ellipse GetClipRgn GetCurrentPositionEx GetRgnBox GetTextColor GetTextExtentPoint32W IntersectClipRect LineTo OffsetRgn Pie PtInRegion RestoreDC RoundRect SaveDC SelectClipRgn ExtSelectClipRgn SetPolyFillMode SetRectRgn SetTextColor GetWorldTransform SetWorldTransform AbortPath BeginPath CloseFigure EndPath FillPath PathToRegion StrokePath ExtCreatePen MoveToEx TextOutW CreatePolygonRgn Polygon Polyline PolyBezierTo EnumFontFamiliesExW GetCharABCWidthsW GetFontData GetGlyphOutlineW GetOutlineTextMetricsW GetFontUnicodeRanges GetGlyphIndicesW GetTextExtentPointI AddFontMemResourceEx RemoveFontMemResourceEx SetTextAlign ExtTextOutW GetTextFaceW GdiFlush CreateDIBitmap GetCurrentObject GetViewportOrgEx GetDeviceCaps

shell32

ShellExecuteW Shell_NotifyIconW SHGetPathFromIDListW SHCreateDirectoryExW SHGetFolderPathW SHFileOperationW SHBrowseForFolderW CommandLineToArgvW

ole32

StringFromGUID2 OleInitialize OleUninitialize CLSIDFromString CLSIDFromProgID OleLockRunning CoCreateInstance CoTaskMemFree CreateBindCtx CreateStreamOnHGlobal CoUninitialize CoInitialize IIDFromString CoCreateGuid RegisterDragDrop

oleaut32

VariantCopy SysAllocString SysStringLen SysAllocStringLen SysFreeString SysAllocStringByteLen VariantClear

usp10

ScriptFreeCache ScriptItemize ScriptShape

opengl32

wglGetCurrentContext wglGetProcAddress

d2d1

ord1

dwrite

DWriteCreateFactory

shlwapi

PathMatchSpecW StrToIntExW PathIsDirectoryW SHCreateStreamOnFileW StrToIntExA

version

GetFileVersionInfoSizeW VerQueryValueW GetFileVersionInfoW

imm32

ImmGetContext ImmDestroyContext ImmReleaseContext ImmAssociateContext ImmCreateContext

gdiplus

GdipRestoreGraphics GdipCreateFontFamilyFromName GdipDeleteFontFamily GdipGetGenericFontFamilySansSerif GdipSetClipPath GdipGetGenericFontFamilyMonospace GdipGetEmHeight GdipGetCellAscent GdipCreateBitmapFromStreamICM GdipSaveGraphics GdipGetGenericFontFamilySerif GdipAlloc GdipFillPath GdiplusStartup GdiplusShutdown GdipCloneImage GdipDisposeImage GdipSaveImageToFile GdipGetImageGraphicsContext GdipGetImageWidth GdipGetImageHeight GdipStringFormatGetGenericTypographic GdipImageGetFrameCount GdipImageSelectActiveFrame GdipGetPropertyItemSize GdipGetPropertyItem GdipCreateBitmapFromFile GdipDrawPath GdipSetWorldTransform GdipSetPixelOffsetMode GdipSetSmoothingMode GdipCreateFromHDC GdipSetPenDashArray GdipSetPenDashOffset GdipSetPenDashStyle GdipSetPenMiterLimit GdipSetPenLineJoin GdipSetPenLineCap197819 GdipDeletePen GdipCreatePen2 GdipCreatePen1 GdipSetPathGradientWrapMode GdipSetPathGradientPresetBlend GdipCreatePathGradientFromPath GdipSetLineWrapMode GdipSetLinePresetBlend GdipCreateLineBrush GdipCreateSolidFill GdipDeleteBrush GdipCloneBrush GdipIsMatrixIdentity GdipTransformMatrixPoints GdipTranslateMatrix GdipDeleteMatrix GdipCreateMatrix2 GdipCreateMatrix GdipGetPathWorldBounds GdipTransformPath GdipAddPathString GdipAddPathPath GdipAddPathEllipse GdipAddPathBezier GdipAddPathLine GdipClosePathFigure GdipSetClipRectI GdipStartPathFigure GdipSetPathFillMode GdipDeletePath GdipCreatePath GdipGetImageEncoders GdipGetImageEncodersSize GdipDrawImageRectI GdipGraphicsClear GdipDeleteGraphics GdipBitmapUnlockBits GdipBitmapLockBits GdipCreateBitmapFromScan0 GdipFree GdipCreateBitmapFromFileICM GdipCreateBitmapFromStream

msimg32

AlphaBlend GradientFill

Name

.text

Size

5.7MB

Virtual Size

5.7MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

1.0MB

Virtual Size

1.0MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

99KB

Virtual Size

237KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

_RDATA

Size

512B

Virtual Size

48B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

128B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1.9MB

Virtual Size

1.9MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

313KB

Virtual Size

313KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-09-25_d30e7d42b2aed38a9e6cea1c803bd976_amadey_darkgate_elex_glassworm_luca-stealer_magniber_njrat_smoke-loader

PE Signature issue

wldap32

bcrypt

advapi32

crypt32

secur32

ws2_32

iphlpapi

kernel32

user32

gdi32

shell32

ole32

oleaut32

usp10

opengl32

d2d1

dwrite

shlwapi

version

imm32

gdiplus

msimg32

generic