General

  • Target
    2026-11-01_c9db3817a15239ea46f489296f6a6e26_darkgate_elex_glassworm_mespinoza_remcos
  • Size 8.2MB
  • Sample261102-kp2cesgt8z
  • SHA256 df438aa2653cde3ead4a47a24f408b32df8b38935c0211c2d17528d0d9f35cb7
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

File Explorer

  • 2026-11-01_c9db3817a15239ea46f489296f6a6e26_darkgate_elex_glassworm_mespinoza_remcos
    .exe 8.2MB

2026-11-01_c9db3817a15239ea46f489296f6a6e26_darkgate_elex_glassworm_mespinoza_remcos

  • IMPHASH 48507d8a74da45c2da2c2449ee2fb53c
  • SHA256 df438aa2653cde3ead4a47a24f408b32df8b38935c0211c2d17528d0d9f35cb7
  • MD5 SHA1 SHA512 SSDEEP TLSH
  • Unsigned PE

    Checks for missing Authenticode signature.

Minor OS version
1
Major OS version
5
Entry point
1206027
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE
PDB paths
D:\code\mtz_zip\product\win32\dbginfo\wpmain.pdb