General

  • Target
    2026-11-02_ebb182aa64a9934ea2c09b646b13de4e_darkgate_elex_floxif_mafia_smoke-loader
  • Size 2.2MB
  • Sample261102-xt6txscw9v
  • SHA256 aa92c31cd842cc1cbcdfd19905d91c280d6609e88df2286a9d8865059b26b16b
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10

Malware Config

Signatures

  • Codesign digest Mismatch 1 IoCs

    File was altered after it was signed.

File Explorer

  • 2026-11-02_ebb182aa64a9934ea2c09b646b13de4e_darkgate_elex_floxif_mafia_smoke-loader
    .exe 2.2MB

2026-11-02_ebb182aa64a9934ea2c09b646b13de4e_darkgate_elex_floxif_mafia_smoke-loader

  • IMPHASH 9ac33cbccc78e13b0da169db9edb70f1
  • SHA256 aa92c31cd842cc1cbcdfd19905d91c280d6609e88df2286a9d8865059b26b16b
  • MD5 SHA1 SHA512 SSDEEP TLSH
  • Codesign digest Mismatch

    File was altered after it was signed.

PE Signature issue

Digest
bb:52:6e:62:8a:be:f3:6e:4f:6a:60:c1:d7:59:50:1b:8c:31:62:ba
Digest Algorithm
sha1
PE Digests Matches
Not matched
Trusted
Not trusted
Signing Certificate
CN=Hewlett Packard,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Desktop Consumer Solutions,O=Hewlett Packard,L=San Diego,ST=California,C=US
Minor OS version
1
Major OS version
5
Entry point
1087270
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE
PDB paths
f:\jnks\workspace\K10_Prod_Active_Build\build1044\SxS\src\Release\HPInstallerExe.pdb