2026-07-26_3870961a995ea5726ec99b5200965fd9_frostygoop_hive_knight_luca-stealer_salatstealer_sliver
- IMPHASH d42595b695fc008ef2c56aabd8efd68e
- SHA256 21f462e8bb275954c93ff0b79c4b6c11459de8701be92d81d78640bcf0acf6b4
-
Codesign digest Mismatch
File was altered after it was signed.
PE Signature issue
Digest
2b:47:80:7d:f1:8a:13:f1:e2:3a:c8:ab:e8:f2:11:e9:7f:90:c6:42
Digest Algorithm
sha1
PE Digests Matches
Not matched
Trusted
Not trusted
Signing Certificate
CN=goglabar.on,O=DZU9fD72awi9s,L=XK6Jw4,ST=Yoq5WfCNd,C=US
Subject
CN=goglabar.on,O=DZU9fD72awi9s,L=XK6Jw4,ST=Yoq5WfCNd,C=US
Serial Number
0d:43:3d:23:3c:2b:aa:ca
Issuer
CN=goglabar.on,O=DZU9fD72awi9s,L=XK6Jw4,ST=Yoq5WfCNd,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign
Ext Key Usages
ExtKeyUsageServerAuth, ExtKeyUsageClientAuth
Timespan
Jul 24, 2026 - Jul 24, 2027
Minor OS version
1
Major OS version
6
Entry point
471264
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
Name
.text
Size
842KB
Virtual Size
841KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
1.1MB
Virtual Size
1.1MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
53KB
Virtual Size
346KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
19KB
Virtual Size
18KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.xdata
Size
512B
Virtual Size
180B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.idata
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
15KB
Virtual Size
14KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.symtab
Size
104KB
Virtual Size
104KB
Characteristics
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
14KB
Virtual Size
13KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ