2026-08-08_e2b43e3d4dbe5b947282b4628c56eb0c_amadey_elex_redline-stealer_rhadamanthys_smoke-loader_stop
- IMPHASH 5dda066d95c830fd85c7c3534c3f1b8d
- SHA256 48b2953da3cbd023d86d40dffd702c7283adc21fe9ccc2858a6afa0025ed63b2
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
02:4a:6a:5b:67:78:51:3d:bb:93:b5:e6:ba:76:a4:98:9b:d3:a8:9b:f3:d8:f8:16:77:5a:35:58:01:a0:73:a4
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=525c3d3f1b06302b310410391d3f23471542520105293b2253150610173842041410,POSTALCODE=10805,ST=0b1c1115005f5c4e111608130d1716070407125b0c1704+ST=0b1c1115494a5c024150110d05170e09031e0a1f1a0150025113451d111807075354195315000e091843540114031f0f4053060e0414150c0210571f0a0a055b0c0b0a070b
Subject
CN=525c3d3f1b06302b310410391d3f23471542520105293b2253150610173842041410,POSTALCODE=10805,ST=0b1c1115005f5c4e111608130d1716070407125b0c1704+ST=0b1c1115494a5c024150110d05170e09031e0a1f1a0150025113451d111807075354195315000e091843540114031f0f4053060e0414150c0210571f0a0a055b0c0b0a070b
Serial Number
99:e8:6c:9d:06:f7:55:69:1c:75:82:eb:12:14:5a:0d
Issuer
CN=525c3d3f1b06302b310410391d3f23471542520105293b2253150610173842041410,POSTALCODE=10805,ST=0b1c1115005f5c4e111608130d1716070407125b0c1704+ST=0b1c1115494a5c024150110d05170e09031e0a1f1a0150025113451d111807075354195315000e091843540114031f0f4053060e0414150c0210571f0a0a055b0c0b0a070b
Timespan
Feb 24, 2024 - Feb 23, 2025
Minor OS version
0
Major OS version
5
Entry point
9148
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
C:\zida\49\cifadevomuwiva\x.pdb
Name
.text
Size
4.0MB
Virtual Size
4.0MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
21KB
Virtual Size
20KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
40KB
Virtual Size
41.0MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
39KB
Virtual Size
38KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ