2026-07-27_798a82c33305f2e1fc8a96199c8bbd0a_akira_glassworm_rusty-stealer
- SHA256 48feb8a3b09727dadae9231906df7aabd400609c8fa1fb9241c20ce82598dc4e
-
Detects binaries (Windows and macOS) referencing many web browsers. Observed in information stealers
-
Codesign digest Mismatch
File was altered after it was signed.
PE Signature issue
Digest
e5:a6:5e:ff:38:43:96:f0:73:4f:8a:82:09:19:6c:65:6a:54:65:37:cc:1b:70:cf:65:1a:e0:df:b5:27:41:40
Digest Algorithm
sha256
PE Digests Matches
Not matched
Trusted
Not trusted
Signing Certificate
CN=Andreas Schindel,O=Schindel Software GmbH,L=München,ST=Bayern,C=DE
Subject
CN=Andreas Schindel,O=Schindel Software GmbH,L=München,ST=Bayern,C=DE
Serial Number
25:43:1d:7e:78:cb:c9:1f:3f:49:f3:15:22:1a:3d:67:7c:2b:5a:56
Issuer
CN=Andreas Schindel,O=Schindel Software GmbH,L=München,ST=Bayern,C=DE
Revocation Status
Not revoked
Timespan
Jul 20, 2026 - Jul 17, 2036
Minor OS version
0
Major OS version
6
Entry point
4416
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
Name
.txt0
Size
2.8MB
Virtual Size
2.8MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdt1
Size
464KB
Virtual Size
464KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.dat0
Size
3KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
24KB
Virtual Size
24KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.tls0
Size
512B
Virtual Size
144B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
512B
Virtual Size
16B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
8KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ