General

  • Target
    2026-08-03_78a208538e82a0ff3908a6da92ee29ae_elex_glassworm_remcos_stop_tobfy
  • Size 10.5MB
  • Sample260804-ncf3havsct
  • SHA256 189a50ed4062f06ae3c217af6ce570c8865e745e075316b6e5188d2d945e3fa7
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

File Explorer

  • 2026-08-03_78a208538e82a0ff3908a6da92ee29ae_elex_glassworm_remcos_stop_tobfy
    .exe 10.5MB

2026-08-03_78a208538e82a0ff3908a6da92ee29ae_elex_glassworm_remcos_stop_tobfy

  • IMPHASH 2404c81c76bec2a2c4d4762cf0370151
  • SHA256 189a50ed4062f06ae3c217af6ce570c8865e745e075316b6e5188d2d945e3fa7
  • MD5 SHA1 SHA512 SSDEEP TLSH
Digest
2a:bc:fb:cb:c9:13:37:ff:0d:9f:37:17:e5:a4:14:1d:f4:20:a5:87:b3:23:56:6c:89:ea:25:43:24:cf:97:19
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=4489370,CN=NCH Software\, Inc.,O=NCH Software\, Inc.,L=Greenwood Village,ST=Colorado,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553

PE Signature issue

Digest
b9:40:1b:98:a0:4f:15:c3:59:2c:f7:0e:0a:7b:da:79:10:80:46:3e
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
SERIALNUMBER=4489370,CN=NCH Software\, Inc.,O=NCH Software\, Inc.,L=Greenwood Village,ST=Colorado,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553
Minor OS version
0
Major OS version
4
Entry point
5486784
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE
PDB paths
c:\sourcecode\videopad\release\VideoPad.pdb