2026-08-21_cc1d6bd86bf71c6a5d0a258133f3684d_elex_glassworm_icedid_njrat_rhadamanthys
- SHA256 32876c5ff39c873d3482c478949effa8c5646dca7e1ec9440a7c4f41ba8eabd1
-
Detects executables packed with ASPack
-
ASPack v2.12-2.42
Detects executables packed with ASPack v2.12-2.42
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
475137
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
PDB paths
Name
CODE
Size
154KB
Virtual Size
368KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
DATA
Size
2KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
BSS
Size
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.idata
Size
12KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.zqi
Size
512B
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
Virtual Size
28KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.ick
Size
32KB
Virtual Size
32KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.aspack
Size
12KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.adata
Size
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.yxutw
Size
512B
Virtual Size
4KB
Characteristics
Name
.f
Size
512B
Virtual Size
4KB
Characteristics
Name
.fmbav
Size
512B
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.ygz
Size
512B
Virtual Size
4KB
Characteristics
Name
dvOYmZXp
Size
136KB
Virtual Size
136KB
Characteristics
Name
XnaNzHfn
Size
2KB
Virtual Size
1KB
Characteristics
Name
ChzLKiXT
Size
512B
Virtual Size
317B
Characteristics
Name
BifSXYWM
Size
125KB
Virtual Size
124KB
Characteristics
Name
NlEHOmSl
Size
2.3MB
Virtual Size
2.3MB
Characteristics
Name
ghQnxHZi
Size
168KB
Virtual Size
168KB
Characteristics
Name
drFrPKJs
Size
4KB
Virtual Size
3KB
Characteristics
Name
IrUERGfd
Size
165KB
Virtual Size
165KB
Characteristics
Name
hTVCjbHq
Size
3KB
Virtual Size
3KB
Characteristics
Name
HXkWPzBD
Size
159KB
Virtual Size
158KB
Characteristics