General

  • Target
    2026-10-07_d2d9da3b996e718125bee88c76f63fee_darkgate_elex_floxif_mafia_smoke-loader
  • Size 2.0MB
  • Sample261008-fbqasaby2p
  • SHA256 9940608c9a61000e4803dd131fa61f4502536d650044f5c9a1e3da3a6d3e407a
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10

Malware Config

Signatures

  • Codesign digest Mismatch 1 IoCs

    File was altered after it was signed.

File Explorer

  • 2026-10-07_d2d9da3b996e718125bee88c76f63fee_darkgate_elex_floxif_mafia_smoke-loader
    .exe 2.0MB

2026-10-07_d2d9da3b996e718125bee88c76f63fee_darkgate_elex_floxif_mafia_smoke-loader

  • IMPHASH 81ae64fd920ac8adb5cf55f8cf746a3e
  • SHA256 9940608c9a61000e4803dd131fa61f4502536d650044f5c9a1e3da3a6d3e407a
  • MD5 SHA1 SHA512 SSDEEP TLSH
  • Codesign digest Mismatch

    File was altered after it was signed.

PE Signature issue

Digest
d7:19:0d:e2:c3:7e:ef:49:22:fe:4b:91:70:d3:7f:f6:29:c0:1c:04:7d:78:2c:cb:6f:1a:91:f6:e5:10:e3:8f
Digest Algorithm
sha256
PE Digests Matches
Not matched
Trusted
Signing Certificate
CN=SAP SE,OU=SAP Production CSA2017,O=SAP SE,L=Walldorf,ST=Baden-Wuerttemberg,C=DE
Minor OS version
1
Major OS version
5
Entry point
1188320
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE
PDB paths
d:\depot\bas\720_EXT_REL\fes_730_REL\src\opt\ntintel\Profile.pdb