2026-04-23_55741f25d1915a78443179fe23845542_amadey_darkgate_elex_emotet_icedid_manuscrypt_redline-stealer_rhadamanthys_smoke-loader_stealc_stop_tofsee_xiaobaminer
- SHA256 0590c985e67233bf2e3a9af711dc35f62c9ed4f097110716dc945e03e5bbb86d
-
Detect Blackmoon payload
-
Unsigned PE
Checks for missing Authenticode signature.
generic
count=9, id=11, version=8047,
count=6, id=10, version=8047,
count=3, id=12, version=7291,
count=5, id=95, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=32, id=14, version=7299,
count=137, id=10, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=2, id=93, version=2179,
count=31, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=511, id=1, productName=Unmarked objects,
count=109, id=11, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=1, productName=Unmarked objects (old),
count=17, id=11, productName=VS98 (6.0) build 8168, version=8168,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,