2026-07-02_0bb889d2d83f6736f325281823e9a070_amadey_coinminer_darkgate_elex_glassworm_nymaim_rhadamanthys_smoke-loader_stop
- IMPHASH 9165ea3e914e03bda3346f13edbd6ccd
- SHA256 bfa6bcabc852e67f53b2545aba49fa2a863bf68bfa01ddf04f028c59730b2080
-
Detects Windows executables referencing non-Windows User-Agents
-
Unsigned PE
Checks for missing Authenticode signature.
generic
count=1, id=12, version=7291,
count=10, id=14, version=7299,
count=5, id=19, version=8034,
count=45, id=1, productName=Unmarked objects,
count=5, id=11, productName=VS98 (6.0) build 8168, version=8168,
count=35, id=10, productName=VS98 (6.0) build 8168, version=8168,