2026-09-30_488b9d0444769bdf1c0b4bbd9d2891c4_amadey_darkgate_elex_glassworm_nymaim_ramnit_rhadamanthys_smoke-loader_vidar_wannacry

General

Target
2026-09-30_488b9d0444769bdf1c0b4bbd9d2891c4_amadey_darkgate_elex_glassworm_nymaim_ramnit_rhadamanthys_smoke-loader_vidar_wannacry
Size 8.5MB
Sample260930-nwmdmavckd
SHA256 cb8298339c491ef49c65d784ec19c736a8dc69bd55ab6d60c685c99a9514b52b
MD5 488b9d0444769bdf1c0b4bbd9d2891c4
SHA1 4e41b1a54768e9c82def4ebc6dd993f138345f51
SHA512 99cf056236a3022ebfd90836f257734e14c8f0d90f6f0ca26528139e3035be4ad0c22b282132c9392aefffc97903e2e20ffa36b6e529757e049b531830e41efe
SSDEEP 98304:CdYOXwnS4rVR5v77GBfWx77GBfW1p1zYuraV8mqoq2Vjnm3tY:nIcRGBfW1GBfW1pVVGnKO
TLSH
T19F967C0273E58076E0B26670857A97659332BD701F32D6EF66947A1E7E33BC08D36362
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-09-30_488b9d0444769bdf1c0b4bbd9d2891c4_amadey_darkgate_elex_glassworm_nymaim_ramnit_rhadamanthys_smoke-loader_vidar_wannacry

2026-09-30_488b9d0444769bdf1c0b4bbd9d2891c4_amadey_darkgate_elex_glassworm_nymaim_ramnit_rhadamanthys_smoke-loader_vidar_wannacry

.exe 8.5MB

IMPHASH ed86c2ba483c37b0e2cfeecbd5fca876
SHA256 cb8298339c491ef49c65d784ec19c736a8dc69bd55ab6d60c685c99a9514b52b
MD5 488b9d0444769bdf1c0b4bbd9d2891c4
SHA1 4e41b1a54768e9c82def4ebc6dd993f138345f51
SHA512 99cf056236a3022ebfd90836f257734e14c8f0d90f6f0ca26528139e3035be4ad0c22b282132c9392aefffc97903e2e20ffa36b6e529757e049b531830e41efe
SSDEEP 98304:CdYOXwnS4rVR5v77GBfWx77GBfW1p1zYuraV8mqoq2Vjnm3tY:nIcRGBfW1GBfW1pVVGnKO
TLSH
T19F967C0273E58076E0B26670857A97659332BD701F32D6EF66947A1E7E33BC08D36362
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

4

Entry point

5080

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths