2026-08-04_1d95d828e20196b5f93a5888a53fc890_elex_frostygoop_hive_salatstealer_sliver
- IMPHASH 1aae8bf580c846f39c71c05898e57e88
- SHA256 c69fd56294e6bbd872e3d2792d3f3807b2948c18d5242df5e92eb87865906ab7
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
67:ed:54:74:61:3b:ac:8e:cd:2b:cb:cb:9b:07:56:10:39:0e:98:27
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=dewo.so,O=MM7VWt9ze79t,L=da9YWFsR,ST=VkXvD7H0,C=US
Subject
CN=dewo.so,O=MM7VWt9ze79t,L=da9YWFsR,ST=VkXvD7H0,C=US
Serial Number
70:d5:df:84:4c:94:20:f0
Issuer
CN=dewo.so,O=MM7VWt9ze79t,L=da9YWFsR,ST=VkXvD7H0,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign
Ext Key Usages
ExtKeyUsageServerAuth, ExtKeyUsageClientAuth
Timespan
Aug 3, 2026 - Aug 3, 2027
Minor OS version
1
Major OS version
6
Entry point
480016
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
Name
.text
Size
1.4MB
Virtual Size
1.4MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
2.3MB
Virtual Size
2.3MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
45KB
Virtual Size
190KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.idata
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
67KB
Virtual Size
66KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.symtab
Size
115KB
Virtual Size
114KB
Characteristics
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ