General

  • Target
    2026-11-06_fba6d289b653f99d39a1b74362d1d40b_darkgate_elex_floxif_mafia
  • Size 1.8MB
  • Sample261107-wpwmqafe73
  • SHA256 2a234eebb6624a6ad8bb241a51cc0bf8f786de2bb5fcc2b4bc9b9e24ae39eeeb
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10

Malware Config

Signatures

  • Codesign digest Mismatch 1 IoCs

    File was altered after it was signed.

File Explorer

  • 2026-11-06_fba6d289b653f99d39a1b74362d1d40b_darkgate_elex_floxif_mafia
    .exe 1.8MB

2026-11-06_fba6d289b653f99d39a1b74362d1d40b_darkgate_elex_floxif_mafia

  • IMPHASH 1fdb052609eec9b15b704fa8bac64f51
  • SHA256 2a234eebb6624a6ad8bb241a51cc0bf8f786de2bb5fcc2b4bc9b9e24ae39eeeb
  • MD5 SHA1 SHA512 SSDEEP TLSH
  • Codesign digest Mismatch

    File was altered after it was signed.

PE Signature issue

Digest
19:2b:be:3c:07:e4:32:1b:a0:a8:49:20:48:92:0e:52:dd:9d:d9:e4
Digest Algorithm
sha1
PE Digests Matches
Not matched
Trusted
Not trusted
Signing Certificate
CN=Hewlett-Packard Company,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Hewlett-Packard Company,L=Andover,ST=Massachusetts,C=US
Minor OS version
1
Major OS version
5
Entry point
1060523
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE
PDB paths
D:\katte\works\SmartPrint\SCM\branches\SmartPrint2.0\extensions\InternetExplorer\Espresso\Release\SmartPrintSetup.pdb