2026-08-08_8b915ce9aeb9bbb6d2d6b22f1850e882_amadey_cobalt-strike_darkgate_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_rhadamanthys_satacom_stealc_vidar_xworm
- SHA256 9ae607d39875cc21d8e4a7d2c2dbae76263c0946a1d79e4c09de78e479ffcf23
-
Detects Windows executables referencing non-Windows User-Agents
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
2
Major OS version
6
Entry point
6160848
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_APPCONTAINER
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
Name
Size
Virtual Size
Characteristics
Name
Size
Virtual Size
Characteristics
Name
Size
Virtual Size
Characteristics
Name
Size
Virtual Size
Characteristics
Name
Size
Virtual Size
Characteristics
Name
Size
Virtual Size
Characteristics
Name
Size
Virtual Size
Characteristics