2026-08-11_518ed2ed59b21525ac443b2c1a5ab63c_elex_glassworm_icedid_njrat
- SHA256 b6049a795af5e87f9d69d7ab8acbd0c7e912d87f7d4c15f1be52d610ffff4d4f
-
UPX packed file
Detects executables packed with UPX/modified UPX open source packer.
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
9865850
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
PDB paths
Name
UPX0
Size
Virtual Size
7.1MB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
UPX1
Size
2.4MB
Virtual Size
2.4MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
208KB
Virtual Size
212KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
AYCLgAWZ
Size
74KB
Virtual Size
74KB
Characteristics
Name
xyZVmJsI
Size
5KB
Virtual Size
4KB
Characteristics
Name
mNjGqjlw
Size
5KB
Virtual Size
4KB
Characteristics
Name
uYgRjWYP
Size
151KB
Virtual Size
151KB
Characteristics
Name
PejuCZKp
Size
1.9MB
Virtual Size
1.9MB
Characteristics
Name
lYjBrnkY
Size
115KB
Virtual Size
114KB
Characteristics
Name
nLuBelcR
Size
1024B
Virtual Size
1017B
Characteristics
Name
FqNeiiuk
Size
87KB
Virtual Size
87KB
Characteristics
Name
jfZcIZJv
Size
4KB
Virtual Size
4KB
Characteristics
Name
mskfDDIf
Size
111KB
Virtual Size
110KB
Characteristics