2026-05-28_f635b1ea4419e75f457f545fde93f0a3_amadey_elex_glassworm_manuscrypt_rhadamanthys_stop

General

Target
2026-05-28_f635b1ea4419e75f457f545fde93f0a3_amadey_elex_glassworm_manuscrypt_rhadamanthys_stop
Size 2.1MB
Sample260528-tgl27set2k
SHA256 bc13d725aefdc021fc65f3f7e89030c1e1a544615a5ad2ffd90b7c7e782b466d
MD5 f635b1ea4419e75f457f545fde93f0a3
SHA1 1d64b30e079802f6c8bd00cc4d8ba0016a42bb96
SHA512 942d9720d4a4d16c5d1410d84bd9bcd2846b930ee7acc027be12b539c22132b97691df05ac784863ffa4bfce3c7b400cc19ccae201d7734552b97d19adf44640
SSDEEP 49152:+IiIdbwW35DMnCIjtAy4pYq9W1PszNsQd:655S6yW1PszZ
TLSH
T17AA58B12B7E483B9E9B35531C9B2A275997A7D110B30E68F538C666D0E33EC18937723
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-05-28_f635b1ea4419e75f457f545fde93f0a3_amadey_elex_glassworm_manuscrypt_rhadamanthys_stop

2026-05-28_f635b1ea4419e75f457f545fde93f0a3_amadey_elex_glassworm_manuscrypt_rhadamanthys_stop

.exe 2.1MB

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 bc13d725aefdc021fc65f3f7e89030c1e1a544615a5ad2ffd90b7c7e782b466d
MD5 f635b1ea4419e75f457f545fde93f0a3
SHA1 1d64b30e079802f6c8bd00cc4d8ba0016a42bb96
SHA512 942d9720d4a4d16c5d1410d84bd9bcd2846b930ee7acc027be12b539c22132b97691df05ac784863ffa4bfce3c7b400cc19ccae201d7734552b97d19adf44640
SSDEEP 49152:+IiIdbwW35DMnCIjtAy4pYq9W1PszNsQd:655S6yW1PszZ
TLSH
T17AA58B12B7E483B9E9B35531C9B2A275997A7D110B30E68F538C666D0E33EC18937723
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

4

Entry point

155390

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

ComSvcConfig.pdb