2026-11-12_503b2db30cec5163e64b16db8525c7b7_amadey_darkgate_elex_glassworm_smoke-loader

Sharing

Copy URL Twitter E-mail

General

Target
2026-11-12_503b2db30cec5163e64b16db8525c7b7_amadey_darkgate_elex_glassworm_smoke-loader
Size 20.7MB
Sample261113-drpcbafs21
SHA256 c6174271dcb84cf3c30ec898476576d08bfca1abe5f1f43820efc856ef936987
MD5 503b2db30cec5163e64b16db8525c7b7
SHA1 9c801f66aa56d399357795707b0c84ac921997d1
SHA512 90a36c1efb95367fbe1fd64c0a7bc690cc7de4be244ee60eb42bc0d3e4953bbd370fac729fc4b80cc094267a3fbad55f6fef09b7768574dd34b955ef0d846555
SSDEEP 393216:MlbnVTERi1DfqWKTCsPPix3jVb2veZlWvwHu9W+tcXWEOo0L/ccORiv19kBOMxMe:MvT7DCc2PyBb9HuM+QWHo+/1v9KjyLFP
TLSH
T10127120BE0F3627DD47A48B3682F2595033D64267FA4E8EE76D52A463C3527B3C9C129
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-11-12_503b2db30cec5163e64b16db8525c7b7_amadey_darkgate_elex_glassworm_smoke-loader

File Explorer

2026-11-12_503b2db30cec5163e64b16db8525c7b7_amadey_darkgate_elex_glassworm_smoke-loader

.exe 20.7MB

2026-11-12_503b2db30cec5163e64b16db8525c7b7_amadey_darkgate_elex_glassworm_smoke-loader

IMPHASH 7ac58cb5eab27863dedbf3de337d1b82
SHA256 c6174271dcb84cf3c30ec898476576d08bfca1abe5f1f43820efc856ef936987
MD5 503b2db30cec5163e64b16db8525c7b7
SHA1 9c801f66aa56d399357795707b0c84ac921997d1
SHA512 90a36c1efb95367fbe1fd64c0a7bc690cc7de4be244ee60eb42bc0d3e4953bbd370fac729fc4b80cc094267a3fbad55f6fef09b7768574dd34b955ef0d846555
SSDEEP 393216:MlbnVTERi1DfqWKTCsPPix3jVb2veZlWvwHu9W+tcXWEOo0L/ccORiv19kBOMxMe:MvT7DCc2PyBb9HuM+QWHo+/1v9KjyLFP
TLSH
T10127120BE0F3627DD47A48B3682F2595033D64267FA4E8EE76D52A463C3527B3C9C129
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

30154921

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

Name

.text

Size

Virtual Size

1.1MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

Virtual Size

2.3MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

Virtual Size

374KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

24KB

Virtual Size

23KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.svmp1

Size

Virtual Size

5.0MB

Characteristics

IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.svmp2

Size

5.4MB

Virtual Size

5.4MB

Characteristics

IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.svmp3

Size

5.5MB

Virtual Size

5.5MB

Characteristics

IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.svmp4

Size

9.1MB

Virtual Size

9.1MB

Characteristics

IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.svmp5

Size

12KB

Virtual Size

11KB

Characteristics

IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.svmp6

Size

728KB

Virtual Size

726KB

Characteristics

IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

2026-11-12_503b2db30cec5163e64b16db8525c7b7_amadey_darkgate_elex_glassworm_smoke-loader

kernel32

ole32

user32

atl

shell32

gdi32

advapi32

winspool.drv

comctl32

oledlg

oleaut32

shlwapi

winmm

ws2_32

comdlg32

generic