2026-06-02_a27ec1b928a0e2f48d8782a996260eb5_amadey_glassworm_hijackloader_icedid_luca-stealer_njrat_poet-rat_stealc_vidar
- SHA256 51667c6dac3a99be34ba77add8bd9cfffdeb3a5abd0a18fd8731e825bebdf036
-
Detects executables containing URLs to raw contents of a Github gist
-
Detects executables manipulated with Fody
Digest
b1:eb:b7:ba:6b:3a:c2:9c:47:cc:a4:21:af:d5:17:e6:4f:74:01:61:c6:25:04:9a:1c:13:f6:40:2c:fb:14:6b
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=91210103MA7CJ3C094,CN=NaisNet Technology Co.\, Ltd.,O=NaisNet Technology Co.\, Ltd.,L=Shenyang,ST=Liaoning,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13085368656e79616e67,1.3.6.1.4.1.311.60.2.1.2=#13084c69616f6e696e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Subject
CN=Certum Extended Validation Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL
Serial Number
bb:f0:cc:b5:b7:b8:31:fd:21:ae:32:77:8a:e4:0c:89
Issuer
CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 19, 2021 - May 18, 2036
Subject
SERIALNUMBER=91210103MA7CJ3C094,CN=NaisNet Technology Co.\, Ltd.,O=NaisNet Technology Co.\, Ltd.,L=Shenyang,ST=Liaoning,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13085368656e79616e67,1.3.6.1.4.1.311.60.2.1.2=#13084c69616f6e696e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Serial Number
64:f3:a4:a8:69:44:eb:47:ef:45:7a:99:75:c6:1f:5c
Issuer
CN=Certum Extended Validation Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Apr 14, 2026 - Apr 14, 2027
Subject
CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US
Serial Number
0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68
Issuer
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jun 4, 2025 - Sep 3, 2036
Subject
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Serial Number
0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 7, 2025 - Jan 14, 2038
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 1, 2022 - Nov 9, 2031
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
C:\Users\62347\Desktop\tool\2025年8月20日费尽心思版\tool\obj\x64\Release\tool.pdb
Name
.text
Size
9.8MB
Virtual Size
9.8MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
452KB
Virtual Size
452KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ