2026-07-06_fe473e214fc1ffdafadc9fe495160651_cobalt-strike_elex_glassworm_icedid_stealc_vidar_xworm
- SHA256 6fe64ac207c80154544cd0eb9df81f5d0f06e41be59a5edbfcd5ee79ab37ede6
-
Detects Windows executables referencing non-Windows User-Agents
-
Unsigned PE
Checks for missing Authenticode signature.
generic
count=2, id=156, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=152, version=20115,
count=4, id=158, productName=VS2010 SP1 build 40219, version=40219,
count=20, id=170, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=9, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=168, id=1, productName=Unmarked objects,
count=8, id=171, productName=VS2010 build 30319, version=30319,
count=9, id=171, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=154, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=157, productName=VS2010 SP1 build 40219, version=40219,