2026-09-30_ea45d8bd93b04bfdf0a00f190331915f_amadey_darkgate_elex_floxif_smoke-loader

Sharing

Copy URL Twitter E-mail

General

Target
2026-09-30_ea45d8bd93b04bfdf0a00f190331915f_amadey_darkgate_elex_floxif_smoke-loader
Size 1.5MB
Sample261001-dslb2szbpd
SHA256 9b1f75e5987978172e7efafe94c69816e7f48a856a36a427b1871c20a88b4925
MD5 ea45d8bd93b04bfdf0a00f190331915f
SHA1 0ae618150a0a5e51667d8e63252d39aaf15cabc1
SHA512 78b3c6f407171f38430151a96074faf79876f83c2badce1d7e245d7f869462899215ee71c0325ad3f074b674574086f634a928f122edca667cbfeee2ee9d2db0
SSDEEP 24576:Ya6ZdpKZ7m/i9oDBcG1TFhcmTIHgqM6j86iT/9o20GljGYufOsJrEH76:f6rpKZdoDBcG1TM89oYljGXf5V
TLSH
T1FA757E1326D5D126E4A32134AB7D7F4E951DFAA047A450CFA3E02D5CEDE12E2EA38317
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-09-30_ea45d8bd93b04bfdf0a00f190331915f_amadey_darkgate_elex_floxif_smoke-loader

File Explorer

2026-09-30_ea45d8bd93b04bfdf0a00f190331915f_amadey_darkgate_elex_floxif_smoke-loader

.exe 1.5MB

2026-09-30_ea45d8bd93b04bfdf0a00f190331915f_amadey_darkgate_elex_floxif_smoke-loader

IMPHASH 4ec33af08ba7693c393805902e47cadf
SHA256 9b1f75e5987978172e7efafe94c69816e7f48a856a36a427b1871c20a88b4925
MD5 ea45d8bd93b04bfdf0a00f190331915f
SHA1 0ae618150a0a5e51667d8e63252d39aaf15cabc1
SHA512 78b3c6f407171f38430151a96074faf79876f83c2badce1d7e245d7f869462899215ee71c0325ad3f074b674574086f634a928f122edca667cbfeee2ee9d2db0
SSDEEP 24576:Ya6ZdpKZ7m/i9oDBcG1TFhcmTIHgqM6j86iT/9o20GljGYufOsJrEH76:f6rpKZdoDBcG1TM89oYljGXf5V
TLSH
T1FA757E1326D5D126E4A32134AB7D7F4E951DFAA047A450CFA3E02D5CEDE12E2EA38317
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

1136178

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

G:\Users\cc4build\Documents\Visual Studio 2010\Work\Application\ControlCenter\ControlCenter4\Product\Develop\ControlCenter4_DLLFB_BHS15\binary\Release\BrCcUxSys.pdb

comctl32

ord16 PropertySheetW CreatePropertySheetPageW ord17

msimg32

GradientFill AlphaBlend

shlwapi

PathIsDirectoryW PathAddBackslashW PathFileExistsW PathFindFileNameW

kernel32

GetPrivateProfileStringW GetPrivateProfileIntW GetModuleHandleW GetACP GetProcAddress IsValidCodePage MulDiv GetLocaleInfoW GetModuleFileNameW CreateMutexW ReleaseMutex GetCurrentProcess lstrcmpW ConnectNamedPipe CreateNamedPipeW FlushFileBuffers GetFileSize CopyFileW GetFileTime Sleep WaitForSingleObject ReleaseSemaphore CreateSemaphoreW OpenSemaphoreW WideCharToMultiByte LockResource lstrcpynW lstrcatW FreeLibrary LoadLibraryW GetTempFileNameW GetFileAttributesW ExpandEnvironmentStringsA LoadLibraryA GetSystemTimeAsFileTime GetTickCount QueryPerformanceCounter HeapDestroy HeapCreate DeleteCriticalSection GetFileType SetHandleCount GetEnvironmentStringsW FreeEnvironmentStringsW GetConsoleMode GetConsoleCP InitializeCriticalSectionAndSpinCount LeaveCriticalSection EnterCriticalSection GetStdHandle IsProcessorFeaturePresent GetStringTypeW TlsFree TlsSetValue TlsGetValue TlsAlloc GetOEMCP InterlockedDecrement InterlockedIncrement GetCPInfo RtlUnwind ExitProcess HeapSize RaiseException IsDebuggerPresent SetUnhandledExceptionFilter UnhandledExceptionFilter TerminateProcess GetStartupInfoW HeapSetInformation CreateThread ResumeThread ExitThread DecodePointer EncodePointer LoadResource FindResourceW SetFileAttributesW GetCurrentProcessId FileTimeToLocalFileTime GetExitCodeThread CompareStringW FileTimeToSystemTime GetTimeFormatW OpenProcess GetProcessHeap HeapFree HeapAlloc HeapReAlloc InitializeCriticalSection GetLocalTime GetDateFormatW CreateDirectoryW GetFileSizeEx SetFilePointerEx OpenFileMappingW CreateFileMappingW FlushViewOfFile UnmapViewOfFile MapViewOfFile OpenEventW SetEvent GetSystemTime FindNextFileW MoveFileExW GetCurrentThreadId DeleteFileW GetTempPathW lstrcpyW LocalFree SetLastError FormatMessageW lstrcmpiW GetCommandLineW CloseHandle FindClose GetLastError CreateFileW ReadFile WriteFile FindFirstFileW lstrlenW SetFilePointer LCMapStringW SetStdHandle WriteConsoleW SetEndOfFile MultiByteToWideChar

user32

GetClassLongW GetDoubleClickTime SetPropW ReleaseCapture GetPropW AppendMenuW CreatePopupMenu SetMenuDefaultItem DestroyMenu PtInRect InflateRect SetTimer KillTimer GetGuiResources WindowFromPoint SetCapture RemovePropW GetSysColor GetScrollInfo ScrollWindowEx SetScrollInfo DefWindowProcW GetActiveWindow GetClientRect MessageBoxW IsDialogMessageW EndDialog CreateDialogParamW TrackMouseEvent DrawFocusRect GetKeyState PostQuitMessage UpdateWindow AttachThreadInput GetForegroundWindow GetWindowThreadProcessId GetMessageW TrackPopupMenu CheckRadioButton GetSysColorBrush CharUpperW RegisterClassExW UnregisterClassW IsZoomed IsIconic SetWindowTextW GetDesktopWindow GetWindowTextW TranslateMessage DispatchMessageW LoadStringW GetSystemMetrics DestroyWindow GetWindowLongW CreateWindowExW MoveWindow wsprintfW LoadImageW GetWindowPlacement GetAncestor GetDlgItem ShowWindow FindWindowExW SetActiveWindow FindWindowW BringWindowToTop SetWindowPos SetCursor InvalidateRect ScreenToClient GetWindowRect GetParent GetCursorPos DrawTextW GetDC ReleaseDC SetWindowLongW CallWindowProcW EndPaint GetSystemMenu PostMessageW LoadCursorW IsWindowEnabled SetFocus BeginPaint EnableMenuItem IsWindowVisible SendMessageW EnableWindow SetProcessDefaultLayout SetWindowRgn SetForegroundWindow GetWindowTextLengthW DialogBoxParamW

gdi32

CreateCompatibleBitmap CreateDIBSection CreateCompatibleDC DeleteDC GetDIBits SetBkColor GetDeviceCaps SetBkMode CreateBitmap CreateRoundRectRgn CreateRectRgn CombineRgn SetTextColor CreateFontW StretchBlt SetBrushOrgEx SetMapMode StretchDIBits SetStretchBltMode PlgBlt MoveToEx PatBlt LineTo SelectObject CreatePen SetROP2 CreateSolidBrush SetLayout RoundRect GetTextExtentPoint32W GetObjectW GetStockObject BitBlt DeleteObject

winspool.drv

ord203 DocumentPropertiesW

comdlg32

GetSaveFileNameW

advapi32

RegQueryValueExW RegOpenKeyExW RegCloseKey CryptAcquireContextW CryptDeriveKey CryptReleaseContext CryptEncrypt CryptCreateHash CryptDecrypt CryptDestroyHash CryptHashData RegQueryValueExA RegOpenKeyExA

shell32

SHAppBarMessage SHGetFileInfoW SHGetSpecialFolderPathW DoEnvironmentSubstW Shell_NotifyIconW SHGetFolderPathW

ole32

CoUninitialize CoInitialize

oleaut32

SysFreeString

Sharing

General

Malware Config

Signatures

File Explorer

2026-09-30_ea45d8bd93b04bfdf0a00f190331915f_amadey_darkgate_elex_floxif_smoke-loader

comctl32

msimg32

shlwapi

kernel32

user32

gdi32

winspool.drv

comdlg32

advapi32

shell32

ole32

oleaut32

generic