2026-07-20_8845de9a3ffac91177a3bba275779bca_akira_amadey_elex_glassworm

resource
2026-07-20_8845de9a3ffac91177a3bba275779bca_akira_amadey_elex_glassworm

IMPHASH 25ca7ef463db31ee13769c0a890c765a
SHA256 2666b50bc5c6f0ece0654679301ab85c4ec4eece839809264d5d336ebc2eac18
MD5 8845de9a3ffac91177a3bba275779bca
SHA1 9d4feeedd6539f342a96c7b579db86b8c19b321e
SHA512 80e7acca8aa170e9659d05c55c04c20bf29266dc2c4f5ee36c8d2fadc36adaca9596214d398d823fa7317647be7d0744b5c370a3803513f1aa57bff994114005
SSDEEP 98304:hX0FYH9PTBFruK71lvB/W6K5hORtH+Y+wCkc6BMz/qbAWGTm:hXsYHVTuK7LI5itCYuzSbAWGTm
TLSH
T1AC562227BD42D8FBCD461076E92E8238C5774128C3314DE352DBFD2C6A17BE06A7952A
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

413034

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE

PDB paths

UnmGTstZrl_0.pdb

kernel32

FlsSetValue GetLastError FlsGetValue FlsAlloc FlsFree FormatMessageW GetStringTypeW GetCPInfo GetOEMCP GetACP IsValidCodePage GetCommandLineA TlsFree TlsSetValue TlsGetValue TlsAlloc InitializeCriticalSectionAndSpinCount DeleteCriticalSection LeaveCriticalSection EnterCriticalSection EncodePointer RaiseException RtlUnwind IsProcessorFeaturePresent GetStartupInfoW SetUnhandledExceptionFilter ReadFile GetOverlappedResult WriteFile UnhandledExceptionFilter IsDebuggerPresent InitializeSListHead GetFileInformationByHandle GetConsoleMode CreatePipe GetCurrentThreadId HeapSize GetTimeZoneInformationForYear InitializeCriticalSectionEx CompareStringW LCMapStringW HeapAlloc WaitForSingleObject HeapFree GetProcessHeap FreeEnvironmentStringsW CompareStringOrdinal AddVectoredExceptionHandler SetThreadStackGuarantee GetCurrentThread SwitchToThread QueryPerformanceCounter GetCurrentProcess RtlCaptureContext GetProcAddress ReleaseMutex SetLastError GetCurrentDirectoryW GetEnvironmentStringsW GetEnvironmentVariableW GetCommandLineW FlushFileBuffers SetFileInformationByHandle DuplicateHandle SetFilePointerEx VirtualProtect DecodePointer GetStdHandle GetCurrentProcessId WriteFileEx SleepEx ReadFileEx GetExitCodeProcess TerminateProcess GetSystemTimePreciseAsFileTime SetStdHandle FindFirstFileExW FindClose MoveFileExW CopyFileExW HeapReAlloc WaitForSingleObjectEx LoadLibraryA lstrlenW CreateMutexA CreateEventW CancelIo GetModuleHandleExW GetModuleHandleW GetModuleFileNameW ExitProcess LoadLibraryExW WaitForMultipleObjects CreateThread CreateWaitableTimerExW SetWaitableTimer Sleep GetFullPathNameW GetModuleHandleA SetEnvironmentVariableW FindNextFileW CreateFileW GetFileInformationByHandleEx CreateDirectoryW DeleteFileW GetFinalPathNameByHandleW GetFileType FreeLibrary GetSystemTimeAsFileTime CloseHandle GetSystemDirectoryW GetWindowsDirectoryW CreateProcessW GetFileAttributesW GetConsoleOutputCP MultiByteToWideChar WriteConsoleW WideCharToMultiByte

advapi32

SystemFunction036

ntdll

RtlNtStatusToDosError NtOpenFile NtWriteFile NtReadFile NtCreateNamedPipeFile

api-ms-win-core-synch-l1-2-0

WakeByAddressAll WaitOnAddress WakeByAddressSingle

bcryptprimitives

ProcessPrng

bcrypt

BCryptGenRandom

Name

.text

Size

469KB

Virtual Size

469KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

5.4MB

Virtual Size

5.4MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

2KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.fptable

Size

512B

Virtual Size

128B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

16KB

Virtual Size

16KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.rsrc

Size

7KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

.data

SHA256 b52ccc0e074452c4b99cdd9dbc53d49133cf33342666408fdf899b27d0528b6c
MD5 876825a442df45fcf6a2ef763fb16452
SHA1 7e4e253046830e7e5448bbe85e5281bce207ff14
SHA512 b8bd5ddd9689da2d7f75028bacee2c327e0596604a57a98a5a09adadddc5033bcc76c84077d485fdad044d9ae04d197bd8564b178833fa0a247867fec202d296
TLSH
T18F512601B642A8C3E52683B11FC0DEC8B651BA492A819713399E23CECF371A38CC3D11
MD5 SHA1 SHA512 TLSH

.fptable

SHA256 076a27c79e5ace2a3d47f9dd2e83e4ff6ea8872b3c2218f66c92b89b55f36560
MD5 bf619eac0cdf3f68d496ea9344137e8b
SHA1 5c3eb80066420002bc3dcc7ca4ab6efad7ed4ae5
SHA512 df40d4a774e0b453a5b87c00d6f0ef5d753143454e88ee5f7b607134598294c7905ccbcf94bbc46e474db6eb44e56a6dbb6d9a1be9d4fb5d1b5f2d0c6ed34bfe
MD5 SHA1 SHA512

.rdata

SHA256 a28858bedc087b273104c03ddf850fdf8413e3fe4c697dc02b55ff386f8e1d15
MD5 add2381253151f25091176b4c6cbf77b
SHA1 974f64d3044fcac64ccf0d54f9ace3a6c4086b1c
SHA512 442752c36cf3bf9b14ce27e878279865bdac138da87ddc465c40465261fa5878b9f102ba1a862c9ae2590c684be73ac412fa252d2fee18bfa2076369ee5b016b
SSDEEP 98304:5YH9PTBFruK71lvB/W6K5hORtH+Y+wCkc6BMz/qbAWGTm:5YHVTuK7LI5itCYuzSbAWGTm
TLSH
T14646232FBD46ACFACD86103FEE568164C0674239C5360EE321DFF90C6617BA167D9826
MD5 SHA1 SHA512 SSDEEP TLSH

.reloc

SHA256 fad2e2fdaeeea8d8cab33b0f56c4d74fb2aee90997742e7ce388185f0246d08b
MD5 47d4977a120ccf2bd7298e673d18f5c4
SHA1 ba4314386150f102f5077ebf026b3bfdadbc1c57
SHA512 23c8be83d6aaef8f176e240e49bfbe67452588a4b25bff1322b5982d5ab025af483bf26651802372df86f56ce21e0a72ca7bf53babc87fc711eae3bc6d208895
SSDEEP 384:hvl5VGGrFQA7QakyOotpU2abkE07WgecqmAB6jUuFmBKdlvFL:JFGUFQPakyOotpKgtqmAcl8BulvF
TLSH
T1EA726C33C8F59575D070923D3B2D77255AAEEFF0D718997B90216EE1E82332428C992B
MD5 SHA1 SHA512 SSDEEP TLSH

.rsrc/GROUP_ICON/MAINICON

SHA256 2ce67b5d79cdd702e9f0660f07c963889fc29be5bfe6b68042b418f7909f7ce5
MD5 077aa4828375d973f307c111be25198e
SHA1 b1765e876adb98a265f5ca20f7d57cc54a281fa4
SHA512 7612f7b6a98e8d64eabe267e74fe181654b3e07b3bfcf7d0a94cd2809b048909a3a60d9873611ec8ce98fd1e75b74721b0729210cc1eff7fa9624af0e5a4b195
MD5 SHA1 SHA512

.rsrc/ICON/1

SHA256 f7d08e786feacbb5026f57081a9b40332910562b76c7dcf39eb78dbe40ea7680
MD5 d491711952d4d9c1779a5c943117eb56
SHA1 64e1bff5d7139767cd93d46280958a99a8b59c4d
SHA512 37e1041c47ba77433d6d04c40ffe9bb21b4058ee085e82b372675cac3a560936104267196596104164011e418a9f8e137f34f7d873977c9c81327464b0419200
TLSH
T1F7F026FE943675BD40B858FAD52485F0123F5F0C8ED10C15D875545A4706E10C3B9F1D
MD5 SHA1 SHA512 TLSH

.rsrc/ICON/2

SHA256 795c0686a1fafa0411f55736c4505283cc76d02dbb512cebe578888825d8d99d
MD5 fcb99781405cba2aa73cfaa6c6574cbe
SHA1 8735ef1d2fbf7a811227fadb02d5240b7bba5b0c
SHA512 c97634485967212e1bba398d0dd2976cd2d278e9f2ccf18d5979b77ce047892d96a2592ec461eba66d6a9c0440bacce96118ceac0bce0423db31d4a52ef12c7d
TLSH
T17831E91E651C41B06D186333EF4A04E9BC5B6F0A83A2BB640730D945A7C1A1567F168A
MD5 SHA1 SHA512 TLSH

.rsrc/ICON/3

SHA256 21a9b4e4ac8b43622311eb78cc0dbe9f4d9624f4732754557fe24f534a4ec514
MD5 318414766170d3fbfa4128f5f2188cd4
SHA1 cefa1de0c60f592b72c612d237f61a4b66ec08c8
SHA512 e234a06790a19f154f3083bdfed3a74101694403147fa71e0b970ab98347b2ea1b7cb1881829d1c123e12c5dc7894f4a73a5756ee2aa0403ee4c551a7d9274d1
TLSH
T1AB718E1F52E726458A828818794CF372B62A4E1F173CD3465C3D8C3AAE171C8D1E757C
MD5 SHA1 SHA512 TLSH

.rsrc/MANIFEST/1

SHA256 ca87d7c948e18207198e03fb28ddb13b53a500e2dc384e127e758e613da92178
MD5 c35124763079b01b86cd01df873a6ab1
SHA1 4424fca340c91e61f95ff2d52d5660706f5d876b
SHA512 1ce67db156a217990ddd325b237cfd60d79f81399f6133ac0a4c85f6f7174382bc5c4d2427da0705584e26170f4e338167744e5a86a55872d30b7cf01a6993ba
TLSH
T10201EF91C928A09AE30102E73B34E549153AE76F088C46FCC4C6477DA20298BCA62191
MD5 SHA1 SHA512 TLSH

.text

SHA256 d9a65769a03fb1e069101e4c945adb77e3459bf4ac2f41bd9f97f8fa57707e06
MD5 6761d1a63eec476836f0b9ef13b5f852
SHA1 f1a032b81c4d7e00d7730e057c2c8945165ec4e9
SHA512 c399b5c5591f84f447dfc4c143c44f8b8e4461bd886aee58b3c11de120c71f1358c8b91bd6846c880aa51669850357b4c059e6571ab7b2f7f9d556ee4682e5e8
SSDEEP 6144:erjJw1GCbY0H4qsxfzS3gHS0EStUsw2Bvz0QdWEgjfUaQ1zoSdzEhu+E2S0hJ75v:VUiH4qUHS0EPsw2Nz0yheVBf756YA
TLSH
T1BFA48D03B642D0FBD90B21F1A02EE73E5E3695045321CDE7C7D4ACB09AA57E06D3A66D
MD5 SHA1 SHA512 SSDEEP TLSH

Sharing

General

Malware Config

Signatures

File Explorer