2026-10-18_155c685c02b1e3e39ef921b0a91063c1_darkgate_elex_smoke-loader_wapomi

Sharing

Copy URL Twitter E-mail

General

Target
2026-10-18_155c685c02b1e3e39ef921b0a91063c1_darkgate_elex_smoke-loader_wapomi
Size 8.0MB
Sample261018-v2v2aaca24
SHA256 c670a3fe647c4e1f35dc438a56c73a0a568edcd198c373e58bd827816fbf2498
MD5 155c685c02b1e3e39ef921b0a91063c1
SHA1 54cc9c270ae57ec0b6ca1b41e180371877888875
SHA512 16f8ced7a015921ebfb69c6215c5e6ec34eb00414f742bd2e2b2d0d5aa1b42a81a64fbd4137c2329a6e31b138dbbf102c92719144e440997e8c5aeb337c3dc49
SSDEEP 98304:dyelRIzXKOzAQBZzeJLvRZO2EPV7IDLGh9em1+EBRkkYKbx9qNRaDybJdooqhegX:dyXzXAQ2JL582skD4MEBR5Y8bGCw3F
TLSH
T17686233175D7712BF124A07C46C6F37E8F8DBAEA822B057F548066C62B216517E62C3B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-10-18_155c685c02b1e3e39ef921b0a91063c1_darkgate_elex_smoke-loader_wapomi

File Explorer

2026-10-18_155c685c02b1e3e39ef921b0a91063c1_darkgate_elex_smoke-loader_wapomi

.exe 8.0MB

2026-10-18_155c685c02b1e3e39ef921b0a91063c1_darkgate_elex_smoke-loader_wapomi

IMPHASH 54b63577f9561f0a41a26afb6ba87dfb
SHA256 c670a3fe647c4e1f35dc438a56c73a0a568edcd198c373e58bd827816fbf2498
MD5 155c685c02b1e3e39ef921b0a91063c1
SHA1 54cc9c270ae57ec0b6ca1b41e180371877888875
SHA512 16f8ced7a015921ebfb69c6215c5e6ec34eb00414f742bd2e2b2d0d5aa1b42a81a64fbd4137c2329a6e31b138dbbf102c92719144e440997e8c5aeb337c3dc49
SSDEEP 98304:dyelRIzXKOzAQBZzeJLvRZO2EPV7IDLGh9em1+EBRkkYKbx9qNRaDybJdooqhegX:dyXzXAQ2JL582skD4MEBR5Y8bGCw3F
TLSH
T17686233175D7712BF124A07C46C6F37E8F8DBAEA822B057F548066C62B216517E62C3B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

8437760

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

Name

0000001

Size

1.2MB

Virtual Size

1.2MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

0000002

Size

285KB

Virtual Size

288KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

0000003

Size

25KB

Virtual Size

106KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

0000004

Size

1.5MB

Virtual Size

1.5MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

0000005

Size

178KB

Virtual Size

180KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1.5MB

Virtual Size

1.5MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

0000007

Size

56KB

Virtual Size

61KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

0000008

Size

3.3MB

Virtual Size

3.3MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

@k� �u)

Size

16KB

Virtual Size

20KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

2026-10-18_155c685c02b1e3e39ef921b0a91063c1_darkgate_elex_smoke-loader_wapomi

kernel32

user32

advapi32

msvcrt

generic