2026-08-17_7609787f92ecce37059f0137105c0850_akira_cobalt-strike_hijackloader_icedid_njrat_remcos_satacom_stealc_vidar

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-17_7609787f92ecce37059f0137105c0850_akira_cobalt-strike_hijackloader_icedid_njrat_remcos_satacom_stealc_vidar
Size 5.6MB
Sample260817-xls8vsdc35
SHA256 588d348df0b835db4cfb36ade8ab15c69fe305234080640d5d56d28403746599
MD5 7609787f92ecce37059f0137105c0850
SHA1 69e19cc0ba500c7a9293155b030e2d39209c9ea0
SHA512 8603552d66cabd843cc17e1591820cea93b5367464c8de689052a475db9808db88ab7745318982c96938904bd50ddb7ef79ea4a39e4d24c46c4459e0c12871ac
SSDEEP 49152:AZQZCsnkXBIuRmtoYsj3cUgnDIAVx6IG1jycwgiLwKAdL+clBpDr8vsiIPhsZ4OI:sevoirV0t/iLwHft8vA
TLSH
T1CD56C31126D98FD8C44FD474CE4665B25A23BC868F21AFDF0980BE293E756B46E3421F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

Malware Config

Signatures

Codesign digest Mismatch 1 IoCs

File was altered after it was signed.

resource
2026-08-17_7609787f92ecce37059f0137105c0850_akira_cobalt-strike_hijackloader_icedid_njrat_remcos_satacom_stealc_vidar

File Explorer

2026-08-17_7609787f92ecce37059f0137105c0850_akira_cobalt-strike_hijackloader_icedid_njrat_remcos_satacom_stealc_vidar

.exe 5.6MB

2026-08-17_7609787f92ecce37059f0137105c0850_akira_cobalt-strike_hijackloader_icedid_njrat_remcos_satacom_stealc_vidar

IMPHASH 557055385b4e170b44172462010a337e
SHA256 588d348df0b835db4cfb36ade8ab15c69fe305234080640d5d56d28403746599
MD5 7609787f92ecce37059f0137105c0850
SHA1 69e19cc0ba500c7a9293155b030e2d39209c9ea0
SHA512 8603552d66cabd843cc17e1591820cea93b5367464c8de689052a475db9808db88ab7745318982c96938904bd50ddb7ef79ea4a39e4d24c46c4459e0c12871ac
SSDEEP 49152:AZQZCsnkXBIuRmtoYsj3cUgnDIAVx6IG1jycwgiLwKAdL+clBpDr8vsiIPhsZ4OI:sevoirV0t/iLwHft8vA
TLSH
T1CD56C31126D98FD8C44FD474CE4665B25A23BC868F21AFDF0980BE293E756B46E3421F
MD5 SHA1 SHA512 SSDEEP TLSH

Codesign digest Mismatch

File was altered after it was signed.

PE Signature issue

Digest

59:cb:9a:0a:90:db:4c:97:5e:f0:ee:0c:95:20:f7:79:9b:7f:81:53:d9:81:91:1c:ef:c3:f8:72:26:a7:6d:c1

Digest Algorithm

sha256

PE Digests Matches

Not matched

Trusted

Signing Certificate

SERIALNUMBER=2748129,CN=Adobe Inc.,OU=Acrobat DC,O=Adobe Inc.,L=San Jose,ST=ca,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553

Chains

Nov 4, 2024

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

Serial Number

0d:1a:34:0f:78:d7:d0:00:e0:89:fd:ba:ad:65:22:df

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Nov 3, 2023 - Nov 4, 2025

Subject

CN=DigiCert Timestamp 2024,O=DigiCert,C=US

Serial Number

0b:ae:66:bc:5a:ba:7f:95:87:c6:f9:e9:04:e3:33:04

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 26, 2024 - Nov 25, 2035

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Serial Number

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Mar 23, 2022 - Mar 22, 2037

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

Major OS version

Entry point

2586240

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

D:\T\M\BuildResults\bin\Release_x64\AcrobatExe.pdb

kernel32

CreateEventA GetCurrentThread SetThreadPriority TerminateThread GetModuleFileNameA GetModuleHandleA GetSystemPowerStatus LoadLibraryA CreateFileA FindFirstFileA FindNextFileA GetFinalPathNameByHandleW SetFilePointer GetSystemInfo VirtualQueryEx CreateFileMappingW MapViewOfFile UnmapViewOfFile LoadLibraryExA GetTempPathA GetSystemDirectoryA GetWindowsDirectoryA SetErrorMode QueryPerformanceCounter HeapSetInformation ReleaseSemaphore WaitForMultipleObjects CreateSemaphoreW CreateProcessW GetSystemTime GetSystemTimeAsFileTime AddAtomW SystemTimeToFileTime QueryPerformanceFrequency IsProcessorFeaturePresent GetVersionExW RtlUnwind UpdateProcThreadAttribute InitializeProcThreadAttributeList DeleteProcThreadAttributeList GetFileAttributesW FindNextFileW FindFirstFileW FindClose GetCurrentDirectoryW SetDllDirectoryW LoadLibraryExW GetExitCodeProcess RaiseException GetLongPathNameW SetCurrentDirectoryW GetTickCount OpenMutexW GetVolumeInformationW GetModuleHandleW CreateThread CreateEventW CreateMutexW WaitForSingleObject ResetEvent SetEvent LeaveCriticalSection EnterCriticalSection InitializeCriticalSection WaitNamedPipeW CreateNamedPipeW TransactNamedPipe SetNamedPipeHandleState DisconnectNamedPipe ConnectNamedPipe ReadFile GetFileType CreateFileW MultiByteToWideChar FindResourceW SizeofResource LockResource LoadResource FindResourceExW TerminateProcess DeleteCriticalSection InitializeCriticalSectionEx GetProcessHeap HeapSize HeapFree HeapReAlloc HeapAlloc HeapDestroy DecodePointer GetStartupInfoW lstrlenW GetCurrentProcess WriteConsoleW GetCommandLineA GetOEMCP GetACP IsValidCodePage ReadConsoleW lstrcmpW EnumSystemLocalesW IsValidLocale LCMapStringW CompareStringW GetTimeFormatW GetDateFormatW ExitProcess SetStdHandle GetConsoleOutputCP FreeLibraryAndExitThread RtlUnwindEx InterlockedPushEntrySList InterlockedPopEntrySList InitializeSListHead SetUnhandledExceptionFilter UnhandledExceptionFilter RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext GetCPInfo CompareStringEx LCMapStringEx EncodePointer GetTempPathW CreateDirectoryW FreeEnvironmentStringsW GetEnvironmentStringsW Process32NextW Process32FirstW CreateToolhelp32Snapshot VerifyVersionInfoW lstrcmpiW LocalFree LocalAlloc VerSetConditionMask SetConsoleTextAttribute GetConsoleScreenBufferInfo WriteConsoleA GetConsoleMode WideCharToMultiByte QueryActCtxW FindActCtxSectionStringW DeactivateActCtx ActivateActCtx CreateActCtxW GetDynamicTimeZoneInformation LoadLibraryW GetProcAddress GetModuleHandleExW GetModuleFileNameW FreeLibrary GetSystemDirectoryW OpenProcess GetCurrentThreadId GetCurrentProcessId Sleep SetLastError GetLastError CloseHandle OutputDebugStringW OutputDebugStringA WriteFile GetFileAttributesA GetCommandLineW lstrcmpA GetLocaleInfoEx InitOnceComplete InitOnceBeginInitialize CloseThreadpoolWork SubmitThreadpoolWork CreateThreadpoolWork FreeLibraryWhenCallbackReturns RtlPcToFileHeader GetStringTypeW SleepConditionVariableSRW WakeAllConditionVariable WakeConditionVariable WaitForSingleObjectEx QueryFullProcessImageNameW GlobalHandle CreatePipe GetTimeZoneInformation QueryDosDeviceW MulDiv GlobalSize GlobalUnlock GlobalLock OpenFileMappingW GetComputerNameExW OpenEventW SetEnvironmentVariableW CreateDirectoryExW CompareFileTime GetFileTime GetFullPathNameW EndUpdateResourceW UpdateResourceW BeginUpdateResourceW GetExitCodeThread GetTempFileNameW GlobalFree GlobalAlloc VirtualProtect VirtualQuery ExpandEnvironmentStringsW ProcessIdToSessionId GetProcessId DuplicateHandle GetProcessTimes IsWow64Process GetProductInfo GetNativeSystemInfo DeleteFileW GetFileSizeEx GetLocalTime TryAcquireSRWLockExclusive ReleaseSRWLockExclusive UnregisterWaitEx RegisterWaitForSingleObject QueryThreadCycleTime GetThreadPriority GetUserDefaultLangID IsDebuggerPresent GetThreadId TlsGetValue AcquireSRWLockExclusive MoveFileExW GetFileAttributesExW CopyFileW TlsAlloc TlsFree TlsSetValue SetFilePointerEx SetEndOfFile GetFileInformationByHandle FlushFileBuffers FindFirstFileExW GetWindowsDirectoryW lstrcmpiA GetLocaleInfoW GetDriveTypeW DeviceIoControl GetVolumeNameForVolumeMountPointW GetVolumePathNamesForVolumeNameW GetFileSize VirtualProtectEx WriteProcessMemory VirtualAllocEx VirtualFreeEx GetVolumeInformationByHandleW GetEnvironmentVariableW GetProfileStringW ReadProcessMemory CreateIoCompletionPort GetQueuedCompletionStatus UnregisterWait TerminateJobObject PostQueuedCompletionStatus SetInformationJobObject IsProcessInJob QueryInformationJobObject ResumeThread DebugBreak GetUserDefaultLCID GetUserDefaultLocaleName SetHandleInformation AssignProcessToJobObject SignalObjectAndWait CreateRemoteThread CreateJobObjectW VirtualFree SearchPathW ExitThread FlushInstructionCache VirtualAlloc InitializeCriticalSectionAndSpinCount GetModuleHandleExA GetStdHandle

user32

TranslateMessage GetMessageW GetUserObjectInformationW GetProcessWindowStation SetProcessWindowStation CreateWindowStationW CreateDesktopW CallNextHookEx UnhookWindowsHookEx DispatchMessageW GetClassNameW GetParent MessageBoxW RemovePropW GetPropW SetPropW GetActiveWindow GetDlgItem SendMessageW GetPropA SetWindowsHookExW PostMessageW DdeDisconnect DdeConnect DdeAddData DdeCreateDataHandle DdeQueryStringA DdeGetData EnumThreadWindows IsWindowVisible DdeFreeStringHandle DdeCreateStringHandleW DdeNameService DdeUninitialize DdeInitializeW SetWindowLongPtrW SendNotifyMessageW RegisterWindowMessageA CloseDesktop SetThreadDesktop OpenInputDesktop CreateWindowExW RegisterClassExW DefWindowProcW RegisterWindowMessageW LoadIconA LoadCursorA FindWindowA DestroyWindow CreateWindowExA RegisterClassExA UnregisterClassA GetThreadDesktop PostThreadMessageW IsWindowEnabled MsgWaitForMultipleObjects PeekMessageW CloseWindowStation GetFocus MonitorFromWindow GetMonitorInfoW GetAsyncKeyState EnumChildWindows FindWindowExW EnableWindow WindowFromPoint GetAncestor GetShellWindow GetRawInputDeviceInfoW SetActiveWindow GetDC ReleaseDC CreateIconFromResourceEx GetWindowTextLengthW RegisterClassW GetWindowInfo SetDlgItemTextW GetRawInputDeviceList DdeClientTransaction LoadIconW SendDlgItemMessageW CloseWindow RegisterClipboardFormatW GetClipboardData IsClipboardFormatAvailable EnumClipboardFormats CountClipboardFormats SetClipboardData GetClipboardFormatNameW GetClipboardFormatNameA GetClipboardSequenceNumber GetClipboardOwner GetPriorityClipboardFormat GetOpenClipboardWindow GetClipboardViewer LoadCursorW GetWindowDC SystemParametersInfoW BeginPaint EndPaint GetClientRect MoveWindow UpdateWindow AdjustWindowRectEx IsChild SetFocus SetRect MonitorFromRect IsRectEmpty GetClassInfoExW GetWindowLongW SetWindowLongW GetSysColor CallWindowProcW RedrawWindow CreateAcceleratorTableW ClientToScreen ScreenToClient SetCapture ReleaseCapture FillRect InvalidateRect InvalidateRgn DestroyAcceleratorTable MapWindowPoints SetCursor IsDialogMessageW LoadBitmapW MapDialogRect SetWindowContextHelpId CreateDialogIndirectParamW PostQuitMessage DefWindowProcA DispatchMessageA GetMessageA UserHandleGrantAccess GetWindow EnumWindows SetParent GetWindowLongPtrW GetWindowTextW IsWindow GetDesktopWindow GetWindowRect SetForegroundWindow GetSystemMetrics BringWindowToTop SendMessageTimeoutW EnumDesktopWindows SetWindowTextW GetForegroundWindow CharNextW EndDialog DialogBoxParamW GetGUIThreadInfo GetWindowThreadProcessId FindWindowW AllowSetForegroundWindow SwitchToThisWindow KillTimer SetTimer EmptyClipboard CloseClipboard OpenClipboard SetWindowPos ShowWindow UnregisterClassW

advapi32

CryptGenKey RegGetValueW RegOpenKeyExA RegQueryValueA RegQueryValueExA RegOpenKeyA EqualSid AllocateAndInitializeSid RegQueryInfoKeyW RegEnumKeyExW RegDeleteKeyW RegCreateKeyW ReportEventW RegisterEventSourceW CloseEventLog ConvertSidToStringSidW MakeAbsoluteSD InitiateSystemShutdownW LookupPrivilegeValueW AdjustTokenPrivileges ConvertStringSecurityDescriptorToSecurityDescriptorW ConvertStringSidToSidW SetSecurityInfo GetSecurityInfo SetEntriesInAclW SetTokenInformation GetSecurityDescriptorSacl GetLengthSid FreeSid DuplicateTokenEx CreateWellKnownSid CopySid GetTokenInformation GetSidSubAuthorityCount GetSidSubAuthority OpenProcessToken RegSetValueExW RegQueryValueExW RegOpenKeyExW RegDeleteValueW RegCreateKeyExW RegCloseKey RegNotifyChangeKeyValue RegEnumValueW RegDeleteKeyExW SystemFunction036 GetNamedSecurityInfoW MapGenericMask AccessCheck OpenThreadToken InitializeSecurityDescriptor InitializeAcl SetSecurityDescriptorDacl GetAce SetKernelObjectSecurity GetKernelObjectSecurity InitializeSid GetAclInformation AddAce RevertToSelf RegDisablePredefinedCache CreateRestrictedToken DuplicateToken CreateProcessAsUserW SetThreadToken CheckTokenMembership RegDeleteTreeW SaferiIsExecutableFileType CryptAcquireContextA CryptAcquireContextW CryptReleaseContext CryptImportKey CryptDestroyKey CryptGetProvParam CryptSetProvParam CryptGenRandom CryptGetUserKey CryptDecrypt CryptCreateHash CryptHashData CryptDestroyHash CryptSignHashA CryptSignHashW CryptGetHashParam CryptSetHashParam CredReadW CredFree CredWriteW CredDeleteW CryptSetKeyParam CryptContextAddRef GetUserNameW ImpersonateAnonymousToken

shlwapi

UrlIsW PathCanonicalizeW PathFileExistsW PathRemoveBackslashW PathAppendW PathRemoveFileSpecW PathFindExtensionA PathCombineW PathIsRelativeW PathFindExtensionW AssocQueryStringW UrlGetPartW PathIsDirectoryW PathIsUNCW PathFindFileNameW PathAddBackslashW PathCreateFromUrlW UrlCanonicalizeW UrlUnescapeW ord219 PathIsUNCServerShareW PathIsURLW

winhttp

WinHttpSetTimeouts WinHttpSetCredentials WinHttpQueryDataAvailable WinHttpReceiveResponse WinHttpOpen WinHttpConnect WinHttpOpenRequest WinHttpSendRequest WinHttpReadData WinHttpWriteData WinHttpCloseHandle WinHttpQueryHeaders WinHttpSetStatusCallback WinHttpAddRequestHeaders

??4PreamblePatcher@sidestep@@QEAAAEAV01@$$QEAV01@@Z ??4PreamblePatcher@sidestep@@QEAAAEAV01@AEBV01@@Z ?AcrobatIsNearAbsoluteIndirectJump@PreamblePatcher@sidestep@@CA_NPEAEI@Z ?AllocPageNear@PreamblePatcher@sidestep@@CAPEAXPEAX@Z ?AllocPreambleBlockNear@PreamblePatcher@sidestep@@SAPEAEPEAX@Z ?FreePreambleBlock@PreamblePatcher@sidestep@@SAXPEAE@Z ?Initialize@PreamblePatcher@sidestep@@CAXXZ ?IsMovWithDisplacement@PreamblePatcher@sidestep@@CA_NPEAEI@Z ?IsNearAbsoluteCall@PreamblePatcher@sidestep@@CA_NPEAEI@Z ?IsNearConditionalJump@PreamblePatcher@sidestep@@CA_NPEAEI@Z ?IsNearRelativeCall@PreamblePatcher@sidestep@@CA_NPEAEI@Z ?IsNearRelativeJump@PreamblePatcher@sidestep@@CA_NPEAEI@Z ?IsShortConditionalJump@PreamblePatcher@sidestep@@CA_NPEAEI@Z ?IsShortJump@PreamblePatcher@sidestep@@CA_NPEAEI@Z ?PatchMovWithDisplacement@PreamblePatcher@sidestep@@CA?AW4SideStepError@2@PEAEI0PEAII@Z ?PatchNearJumpOrCall@PreamblePatcher@sidestep@@CA?AW4SideStepError@2@PEAEI0PEAII@Z ?PatchShortConditionalJump@PreamblePatcher@sidestep@@CA?AW4SideStepError@2@PEAEI0PEAII@Z ?PatchShortJump@PreamblePatcher@sidestep@@CA?AW4SideStepError@2@PEAEI0PEAII@Z ?RawPatch@PreamblePatcher@sidestep@@SA?AW4SideStepError@2@PEAX0PEAPEAXPEBD@Z ?RawPatchWithStub@PreamblePatcher@sidestep@@CA?AW4SideStepError@2@PEAX0PEAEKPEAKPEBD@Z ?RawPatchWithStubAndProtections@PreamblePatcher@sidestep@@CA?AW4SideStepError@2@PEAX0PEAEKPEAKPEBD@Z ?ResolveTargetImpl@PreamblePatcher@sidestep@@CAPEAXPEAE0_N@Z ?Unpatch@PreamblePatcher@sidestep@@SA?AW4SideStepError@2@PEAX00@Z ?granularity_@PreamblePatcher@sidestep@@0JA ?initialized_@PreamblePatcher@sidestep@@0_NA ?pagesize_@PreamblePatcher@sidestep@@0JA ?preamble_pages_@PreamblePatcher@sidestep@@0PEAUPreamblePage@12@EA AcroRd32IsBrokerProcess CreateCoreWebview2EnvironmentSandbox GetHandleVerifier GetWinstaDesktopInfo IsSandboxedProcess

Name

.text

Size

3.4MB

Virtual Size

3.4MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

1.2MB

Virtual Size

1.2MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

77KB

Virtual Size

122KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

195KB

Virtual Size

194KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.didat

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

_RDATA

Size

512B

Virtual Size

500B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

726KB

Virtual Size

725KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

19KB

Virtual Size

18KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-17_7609787f92ecce37059f0137105c0850_akira_cobalt-strike_hijackloader_icedid_njrat_remcos_satacom_stealc_vidar

PE Signature issue

kernel32

user32

advapi32

shlwapi

winhttp

generic