2026-09-30_3f423a878417a522f528276106f59c16_amadey_emotet_icedid_njrat_smoke-loader_stop_vidar
- IMPHASH 02dc4827f6ad392802002b362233f7cd
- SHA256 89b9d7175438df762e7fbdf83469abb1f09863b14f9cb005d9d0510cae7cf3a8
- MD5 3f423a878417a522f528276106f59c16
- SHA1 53d9ae9295b46e6d9649382a82f042d6dbeb0e67
- SHA512 51cd74e7ff3540225367c7a6b85287ca9e4dc93000beb412b41c1f57969e31e2f3661f4a8c47861e6cf6f40f9dde040f3a6d8f10960e30fa9eb94c7d19741e57
- SSDEEP 98304:gF6ooRA9eJs+rZef1+FihaoxDVEhWBFTfvg6Rjk:zNRR6kohaoxMOf4
- TLSH T120B6501692FA428FFAF3ABF0E97587718D367C566A34C1CE271431690D32B908D68727
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
11155704
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
dwmapi
DwmExtendFrameIntoClientArea
winmm
PlaySoundW
timeGetTime
mmioOpenW
mmioDescend
mmioAscend
mmioSeek
mmioRead
mciSendStringW
mmioCreateChunk
mmioGetInfo
mmioAdvance
mmioSetInfo
mmioWrite
mmioClose
imm32
ImmReleaseContext
ImmGetOpenStatus
ImmGetContext
ImmDisableIME
setupapi
SetupDiDestroyDeviceInfoList
SetupDiGetDeviceInterfaceDetailW
SetupDiEnumDeviceInterfaces
SetupDiGetDeviceInstanceIdW
SetupDiEnumDeviceInfo
SetupDiGetClassDevsW
SetupDiGetDeviceRegistryPropertyW
version
GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW
dsound
ord6
ord3
ord1
rpcrt4
UuidToStringW
RpcStringFreeW
bcrypt
BCryptOpenAlgorithmProvider
BCryptCloseAlgorithmProvider
BCryptImportKeyPair
BCryptEncrypt
BCryptDestroyKey
kernel32
CompareStringA
FlushFileBuffers
GetFullPathNameW
GetVolumeInformationW
LockFile
ReadFile
SetEndOfFile
SetFilePointer
UnlockFile
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GlobalHandle
LocalReAlloc
GlobalGetAtomNameW
GlobalFlags
WritePrivateProfileStringW
GetSystemDefaultUILanguage
GetFileAttributesExW
GetFileSizeEx
GetFileTime
lstrcpyW
SetErrorMode
VerSetConditionMask
VerifyVersionInfoW
GetProfileIntW
GetTempFileNameW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
WaitForSingleObjectEx
QueryPerformanceCounter
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetCurrentThread
SuspendThread
CompareStringW
QueryActCtxW
FindActCtxSectionStringW
DeactivateActCtx
ActivateActCtx
CreateActCtxW
GlobalFindAtomW
GlobalAddAtomW
lstrcmpW
GlobalDeleteAtom
GetModuleHandleExW
EncodePointer
OutputDebugStringA
SetLastError
CopyFileW
GlobalSize
GetCurrentProcessId
LoadLibraryExA
VirtualQuery
VirtualProtect
IsBadReadPtr
SearchPathW
DecodePointer
RaiseException
HeapReAlloc
HeapSize
HeapDestroy
OpenMutexW
UnmapViewOfFile
MapViewOfFile
OpenFileMappingW
ReleaseMutex
CreateMutexW
HeapAlloc
SetThreadPriority
GetSystemPowerStatus
GetTickCount
DeleteFileW
ResetEvent
GetSystemDirectoryA
WideCharToMultiByte
FormatMessageW
FindResourceExW
GetUserDefaultUILanguage
TerminateThread
lstrcmpA
CreateProcessW
IsWow64Process
MulDiv
LoadLibraryExW
SetThreadUILanguage
GetCurrentThreadId
GetSystemDirectoryW
GetProcessHeap
HeapFree
LocalAlloc
LocalFree
ResumeThread
DuplicateHandle
InitializeCriticalSectionAndSpinCount
DeviceIoControl
GetPrivateProfileIntW
GetFileSize
GetPrivateProfileStringW
CompareFileTime
SystemTimeToFileTime
GetLocalTime
CreateDirectoryW
GetTempPathW
GetSystemInfo
GetCurrentDirectoryW
FindClose
FindNextFileW
FindFirstFileW
FreeLibrary
LoadLibraryW
GlobalFree
GlobalReAlloc
GlobalUnlock
GlobalLock
GlobalAlloc
lstrcpynW
WriteConsoleW
GetStdHandle
AllocConsole
SystemTimeToTzSpecificLocalTime
GetSystemTime
GetTimeZoneInformation
GetLastError
GetWindowsDirectoryW
Process32NextW
Process32FirstW
CreateToolhelp32Snapshot
SetThreadExecutionState
GetFileAttributesW
WaitForMultipleObjects
LeaveCriticalSection
EnterCriticalSection
WaitForSingleObject
GetExitCodeThread
SetEvent
CreateThread
CreateEventW
lstrcmpiW
lstrlenW
FreeResource
GetCPInfo
MultiByteToWideChar
GetVersionExW
GetVersion
GetCurrentProcess
CloseHandle
WriteFile
CreateFileW
DeleteCriticalSection
InitializeCriticalSection
OutputDebugStringW
Sleep
GetModuleHandleW
FindResourceW
LoadResource
LockResource
SizeofResource
GetModuleFileNameW
GetProcAddress
LoadLibraryA
FileTimeToSystemTime
RtlUnwindEx
RtlPcToFileHeader
VirtualAlloc
ExitThread
FreeLibraryAndExitThread
GetCommandLineA
GetCommandLineW
HeapQueryInformation
SetStdHandle
GetFileType
QueryPerformanceFrequency
ExitProcess
GetACP
LCMapStringW
GetConsoleCP
GetConsoleMode
InitializeCriticalSectionEx
FileTimeToLocalFileTime
GetDriveTypeW
ReadConsoleW
SetFilePointerEx
FindFirstFileExW
IsValidCodePage
GetOEMCP
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableA
GetStringTypeW
GetLocaleInfoW
user32
MoveWindow
WinHelpW
SetScrollInfo
GetTopWindow
GetClassLongPtrW
MapWindowPoints
AdjustWindowRectEx
GetWindowTextLengthW
GetWindowTextW
RemovePropW
GetPropW
SetPropW
GetScrollRange
GetScrollPos
ScrollWindow
TrackPopupMenuEx
TrackPopupMenu
SetMenu
GetMenu
GetCapture
GetKeyState
SetFocus
GetDlgItem
IsIconic
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
SetWindowPlacement
GetWindowPlacement
DestroyWindow
IsChild
IsMenu
CreateWindowExW
GetClassInfoExW
RegisterClassW
DefWindowProcW
GetMessageTime
ClientToScreen
EndPaint
BeginPaint
GetWindowDC
GetMenuStringW
GetLastActivePopup
IsWindowEnabled
SetMenuDefaultItem
UnregisterClassW
FindWindowW
SetWindowLongPtrW
GetScrollInfo
CallWindowProcW
GetWindowLongPtrW
SetProcessDPIAware
DrawFocusRect
GetDlgCtrlID
SetWindowLongW
ValidateRect
GetClassNameW
SetCaretPos
GetCaretPos
EqualRect
GetComboBoxInfo
SetCursor
IsWindow
IntersectRect
UpdateLayeredWindow
ScreenToClient
DestroyCursor
LoadCursorW
SetClassLongPtrW
FindWindowExW
DispatchMessageW
TranslateMessage
PostQuitMessage
PeekMessageW
AttachThreadInput
ShowWindow
GetWindowLongW
SetForegroundWindow
LoadImageW
EmptyClipboard
GetWindowRgn
GetAncestor
MessageBoxW
SetScrollRange
SetActiveWindow
ToUnicodeEx
WindowFromDC
UnionRect
ChildWindowFromPointEx
UnregisterDeviceNotification
RegisterDeviceNotificationW
SetWindowPos
ShowScrollBar
SetWindowTextW
GetWindow
RedrawWindow
LockWindowUpdate
SetParent
ExitWindowsEx
UnhookWindowsHookEx
SetWindowsHookExW
CallNextHookEx
GetWindowThreadProcessId
GetMonitorInfoW
MonitorFromWindow
GetShellWindow
GetForegroundWindow
GrayStringW
DrawTextExW
TabbedTextOutW
GetSubMenu
DeleteMenu
RemoveMenu
LoadBitmapW
GetSysColorBrush
CreatePopupMenu
CreateMenu
GetMenuItemID
GetMenuState
ModifyMenuW
InsertMenuW
GetMenuItemCount
AppendMenuW
GetDesktopWindow
GetSystemMetrics
DestroyIcon
DrawIconEx
SystemParametersInfoW
DrawTextW
SetClipboardData
CloseClipboard
OpenClipboard
MapVirtualKeyExW
IsCharLowerW
GetKeyboardLayout
PostThreadMessageW
MonitorFromPoint
GetMenuItemInfoW
DrawEdge
FillRect
GetCursorPos
SetClassLongW
GetClassLongW
TranslateAcceleratorW
RegisterWindowMessageW
CopyRect
SendMessageW
GetClassInfoW
LoadIconW
IsWindowVisible
SetTimer
KillTimer
EnableWindow
UpdateWindow
GetWindowRect
ReleaseCapture
SetCapture
PtInRect
GetMessagePos
CheckDlgButton
DrawStateW
SubtractRect
TranslateMDISysAccel
DefMDIChildProcW
DefFrameProcW
DrawMenuBar
GetUpdateRect
InvalidateRect
InflateRect
FrameRect
GetSysColor
SetRect
OffsetRect
IsRectEmpty
ReleaseDC
GetClientRect
GetDC
PostMessageW
GetParent
IsClipboardFormatAvailable
CharUpperBuffW
RegisterClipboardFormatW
GetDoubleClickTime
CopyAcceleratorTableW
DestroyAcceleratorTable
CreateAcceleratorTableW
SetScrollPos
GetKeyboardState
EnumDisplayMonitors
SetLayeredWindowAttributes
NotifyWinEvent
InvertRect
HideCaret
EnableScrollBar
MessageBeep
GetIconInfo
GetNextDlgGroupItem
GetSystemMenu
GetMenuDefaultItem
WaitMessage
CopyIcon
DrawIcon
SetCursorPos
IsZoomed
GetFocus
TrackMouseEvent
SetRectEmpty
ReuseDDElParam
UnpackDDElParam
InsertMenuItemW
DrawFrameControl
LoadAcceleratorsW
BringWindowToTop
MapDialogRect
GetAsyncKeyState
CopyImage
RealChildWindowFromPoint
ShowOwnedPopups
CharUpperW
SendDlgItemMessageA
LoadMenuW
WindowFromPoint
GetMessageW
DestroyMenu
MapVirtualKeyW
GetKeyNameTextW
GetActiveWindow
GetNextDlgTabItem
EndDialog
CreateDialogIndirectParamW
SetMenuItemInfoW
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
EnableMenuItem
CheckMenuItem
SetWindowRgn
IsDialogMessageW
gdi32
ExtFloodFill
CopyMetaFileW
CreateDCW
CreateBitmap
CreatePatternBrush
ExcludeClipRect
GetClipBox
GetObjectType
GetViewportExtEx
GetWindowExtEx
IntersectClipRect
LineTo
RestoreDC
SaveDC
SelectClipRgn
ExtSelectClipRgn
SelectPalette
SetBkColor
SetBkMode
SetMapMode
SetLayout
GetLayout
SetPolyFillMode
SetROP2
SetTextColor
SetTextAlign
MoveToEx
SetViewportExtEx
GetCurrentObject
SetWindowExtEx
OffsetViewportOrgEx
OffsetWindowOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
CreateRectRgnIndirect
SetRectRgn
DPtoLP
GetTextMetricsW
GetBkColor
CreatePalette
GetNearestPaletteIndex
GetPaletteEntries
GetSystemPaletteEntries
RealizePalette
CreateDIBitmap
EnumFontFamiliesW
GetTextCharsetInfo
StretchBlt
CreateEllipticRgn
GetTextColor
CreatePolygonRgn
Polygon
Polyline
CreateRoundRectRgn
LPtoDP
GetRgnBox
OffsetRgn
RoundRect
FillRgn
FrameRgn
GetBoundsRect
PtInRegion
SetPaletteEntries
SetPixelV
GetWindowOrgEx
GetViewportOrgEx
GetTextFaceW
GetMapMode
SetWindowOrgEx
SetDIBColorTable
CreateFontW
EnumFontFamiliesExW
CreateRectRgn
GetStockObject
CombineRgn
ExtCreateRegion
Escape
ExtTextOutW
TextOutW
RectVisible
PtVisible
Rectangle
CreateHatchBrush
PatBlt
SetPixel
GetPixel
GetObjectW
DeleteDC
DeleteObject
SelectObject
CreateDIBSection
Ellipse
GetTextExtentPoint32W
CreateFontIndirectW
GetBkMode
CreatePen
CreateSolidBrush
CreateCompatibleBitmap
CreateCompatibleDC
SetViewportOrgEx
GetDeviceCaps
BitBlt
msimg32
AlphaBlend
TransparentBlt
winspool.drv
OpenPrinterW
ClosePrinter
DocumentPropertiesW
advapi32
RegDeleteKeyW
RegOpenKeyExW
RegCreateKeyExW
RegQueryValueExW
RegSetValueExW
RegDeleteValueW
OpenProcessToken
LookupPrivilegeValueW
AdjustTokenPrivileges
RegQueryInfoKeyW
RegEnumKeyExW
RegQueryValueW
RegEnumValueW
RegEnumKeyW
RegCloseKey
RegNotifyChangeKeyValue
shell32
SHGetSpecialFolderLocation
SHGetFolderPathW
SHGetKnownFolderPath
SHGetSpecialFolderPathW
ShellExecuteW
Shell_NotifyIconW
SHGetFileInfoW
DragQueryFileW
DragFinish
SHAppBarMessage
SHBrowseForFolderW
SHGetDesktopFolder
ShellExecuteExW
SHGetPathFromIDListW
comctl32
ImageList_Draw
ImageList_GetImageCount
ImageList_GetIcon
ImageList_ReplaceIcon
_TrackMouseEvent
ImageList_GetImageInfo
ImageList_Remove
InitCommonControlsEx
ord380
shlwapi
PathFindExtensionW
PathFindFileNameW
PathRemoveFileSpecW
PathIsUNCW
PathStripToRootW
StrFormatKBSizeW
uxtheme
GetCurrentThemeName
GetThemeColor
DrawThemeParentBackground
IsAppThemed
GetWindowTheme
GetThemePartSize
DrawThemeBackground
CloseThemeData
OpenThemeData
DrawThemeText
IsThemeBackgroundPartiallyTransparent
GetThemeSysColor
ole32
CoInitialize
CoCreateGuid
CoTaskMemAlloc
CLSIDFromString
CreateStreamOnHGlobal
CoFreeUnusedLibrariesEx
CoInitializeSecurity
FreePropVariantArray
PropVariantCopy
OleDuplicateData
ReleaseStgMedium
CoDisconnectObject
DoDragDrop
OleGetClipboard
CoLockObjectExternal
RegisterDragDrop
RevokeDragDrop
OleLockRunning
OleCreateMenuDescriptor
OleDestroyMenuDescriptor
StringFromGUID2
CoInitializeEx
OleTranslateAccelerator
IsAccelerator
CoUninitialize
CoTaskMemFree
CLSIDFromProgID
CoCreateInstance
PropVariantClear
oleaut32
VariantCopy
VarBstrFromDate
VariantTimeToSystemTime
LoadTypeLi
VariantChangeType
SysAllocStringLen
SysStringLen
SysAllocString
VariantClear
VariantInit
SysFreeString
SystemTimeToVariantTime
SafeArrayCreate
gdiplus
GdipCreateBitmapFromScan0
GdipCloneImage
GdipDisposeImage
GdipGetImageGraphicsContext
GdipDrawImageRectI
GdipDeleteGraphics
GdiplusShutdown
GdiplusStartup
GdipCreateBitmapFromHBITMAP
GdipCreateHBITMAPFromBitmap
GdipDrawImageI
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipGetImagePalette
GdipGetImagePaletteSize
GdipGetImagePixelFormat
GdipAlloc
GdipCreateBitmapFromStream
GdipCreateFromHDC
GdipSetInterpolationMode
GdipCreateFontFromDC
GdipDeleteFont
GdipCreateSolidFill
GdipDeleteBrush
GdipCloneBrush
GdipCreateStringFormat
GdipDeleteStringFormat
GdipSetStringFormatAlign
GdipDrawImageRectRectI
GdipSetStringFormatFlags
GdipSetStringFormatLineAlign
GdipSetTextRenderingHint
GdipDrawString
GdipImageRotateFlip
GdipCreateFontFromLogfontW
GdipDrawImage
GdipCreateImageAttributes
GdipDisposeImageAttributes
GdipSetImageAttributesColorMatrix
GdipCreatePen1
GdipDeletePen
GdipMeasureString
GdipDrawImageRectRect
GdipCreateBitmapFromHICON
GdipSetSmoothingMode
GdipDrawImageRect
GdipDrawLineI
GdipDeleteFontFamily
GdipGetFamily
GdipCreateFont
GdipGetFontUnit
GdipGetFontStyle
GdipGetFontSize
GdipGetLogFontW
GdipGetImageWidth
GdipGetImageHeight
GdipFree
oleacc
AccessibleObjectFromWindow
LresultFromObject
CreateStdAccessibleObject
wininet
InternetReadFile
InternetSetFilePointer
InternetWriteFile
InternetQueryDataAvailable
InternetGetLastResponseInfoW
InternetSetStatusCallbackW
InternetCloseHandle
InternetOpenW
InternetConnectW
HttpOpenRequestW
HttpSendRequestW
?AsSysSvr_RegisterNotify@@3P6AHPEAUHWND__@@PEB_W@ZEA
?AsSysSvr_UnregisterNotify@@3P6AHPEAUHWND__@@PEB_W@ZEA
Name
.text
Size
2.7MB
Virtual Size
2.7MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
1005KB
Virtual Size
1005KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
117KB
Virtual Size
154KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
123KB
Virtual Size
123KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
6.5MB
Virtual Size
6.5MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
147KB
Virtual Size
198KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE