2026-08-02_40c78ce13c6c6a4302259964030bb227_elex_frostygoop_hive_salatstealer_sliver
- IMPHASH 1aae8bf580c846f39c71c05898e57e88
- SHA256 4b69ce91264cb961bdd29fc18ac2fe7325ff9c4f723b07e967701299d34f341b
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
c0:0b:18:ff:e6:a9:9b:ac:70:9c:93:f8:a0:f0:fd:23:d5:25:f7:7b
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=golidu.xyz,O=ol71Zedx6,L=p78mM,ST=jcdXqP,C=US
Subject
CN=golidu.xyz,O=ol71Zedx6,L=p78mM,ST=jcdXqP,C=US
Serial Number
1e:91:0d:5a:99:a9:82:fc
Issuer
CN=golidu.xyz,O=ol71Zedx6,L=p78mM,ST=jcdXqP,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign
Ext Key Usages
ExtKeyUsageServerAuth, ExtKeyUsageClientAuth
Timespan
Aug 1, 2026 - Aug 1, 2027
Minor OS version
1
Major OS version
6
Entry point
483168
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
Name
.text
Size
1.3MB
Virtual Size
1.3MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
1.6MB
Virtual Size
1.6MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
43KB
Virtual Size
189KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.idata
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
68KB
Virtual Size
67KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.symtab
Size
117KB
Virtual Size
117KB
Characteristics
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ