2026-08-19_f1f30a2b2f0fcb88389facfd8309ecb9_frostygoop_hive_knight_luca-stealer_salatstealer_sliver
- IMPHASH d42595b695fc008ef2c56aabd8efd68e
- SHA256 b2beac06e06c1ec7f643d77b4781186aab0060d98d16f6da2cb10d52a5332c9d
-
Codesign digest Mismatch
File was altered after it was signed.
PE Signature issue
Digest
71:e6:c1:f7:ae:e0:98:b0:da:ed:64:11:98:e8:6e:55:3c:37:7c:e6
Digest Algorithm
sha1
PE Digests Matches
Not matched
Trusted
Not trusted
Signing Certificate
CN=static.main,O=r3kdRD7vbYpPQN4,L=UX1d6U,ST=XqXrWU2F,C=US
Subject
CN=static.main,O=r3kdRD7vbYpPQN4,L=UX1d6U,ST=XqXrWU2F,C=US
Serial Number
4a:66:a3:dd:2d:84:27:07
Issuer
CN=static.main,O=r3kdRD7vbYpPQN4,L=UX1d6U,ST=XqXrWU2F,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign
Ext Key Usages
ExtKeyUsageServerAuth, ExtKeyUsageClientAuth
Timespan
Aug 16, 2026 - Aug 16, 2027
Minor OS version
1
Major OS version
6
Entry point
472352
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
Name
.text
Size
1.0MB
Virtual Size
1.0MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
2.0MB
Virtual Size
2.0MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
56KB
Virtual Size
348KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
18KB
Virtual Size
17KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.xdata
Size
512B
Virtual Size
180B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.idata
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
14KB
Virtual Size
13KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.symtab
Size
102KB
Virtual Size
102KB
Characteristics
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ