2026-10-22_ac39b1980208d9e50512de7182174f7e_akira_blankgrabber_glassworm_icedid_luca-stealer_njrat_stealc

Sharing

Copy URL Twitter E-mail

General

Target
2026-10-22_ac39b1980208d9e50512de7182174f7e_akira_blankgrabber_glassworm_icedid_luca-stealer_njrat_stealc
Size 9.0MB
Sample261024-bafmqswt4n
SHA256 61f7590cfbfd2872e331f644aea861774cfc8339db00c414a006c00c66e908c3
MD5 ac39b1980208d9e50512de7182174f7e
SHA1 3a8b29cca7d91c148f8bfb8c7ea4159ec7f74f62
SHA512 cde2cce4ef824fc49a2d3f383b610c85fdd49317875317f1c6f68dabaadd354c07e2a09ab40ac35f61600af2770ca754775302fcf657a88d7a8d5c67bd53a3e9
SSDEEP 98304:6rNfyOzBXhRHsuV0Z6jwMeVAmZ6kQ47ffmrR3i:6rNfyOzJhRMuVhjVwAmwk/7ferR3i
TLSH
T19BA67C5B23A502FCC0BBD2B9CB4B9917D7B2788953B0A34B02B155A11F772705E7E722
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
2026-10-22_ac39b1980208d9e50512de7182174f7e_akira_blankgrabber_glassworm_icedid_luca-stealer_njrat_stealc

File Explorer

2026-10-22_ac39b1980208d9e50512de7182174f7e_akira_blankgrabber_glassworm_icedid_luca-stealer_njrat_stealc

.exe 9.0MB

2026-10-22_ac39b1980208d9e50512de7182174f7e_akira_blankgrabber_glassworm_icedid_luca-stealer_njrat_stealc

IMPHASH 6b90233524a62231e4d7663db9fc5faf
SHA256 61f7590cfbfd2872e331f644aea861774cfc8339db00c414a006c00c66e908c3
MD5 ac39b1980208d9e50512de7182174f7e
SHA1 3a8b29cca7d91c148f8bfb8c7ea4159ec7f74f62
SHA512 cde2cce4ef824fc49a2d3f383b610c85fdd49317875317f1c6f68dabaadd354c07e2a09ab40ac35f61600af2770ca754775302fcf657a88d7a8d5c67bd53a3e9
SSDEEP 98304:6rNfyOzBXhRHsuV0Z6jwMeVAmZ6kQ47ffmrR3i:6rNfyOzJhRMuVhjVwAmwk/7ferR3i
TLSH
T19BA67C5B23A502FCC0BBD2B9CB4B9917D7B2788953B0A34B02B155A11F772705E7E722
MD5 SHA1 SHA512 SSDEEP TLSH

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

bd:55:0d:8f:90:4f:4c:7e:f5:1d:7d:4f:57:5a:b4:37:3c:71:16:95:be:5e:01:9b:35:7e:65:89:29:ab:15:9c

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Aha Doctor Test,O=Aha Doctor,L=Shanghai,C=CN

Chains

Oct 20, 2026

CN=Aha Doctor Test,O=Aha Doctor,L=Shanghai,C=CN

Subject

CN=Aha Doctor Test,O=Aha Doctor,L=Shanghai,C=CN

Serial Number

84:31:fd:ac:9e:02:55:76

Issuer

CN=Aha Doctor Test,O=Aha Doctor,L=Shanghai,C=CN

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Oct 19, 2026 - Oct 20, 2028

Subject

CN=DigiCert SHA256 RSA4096 Timestamp Responder 2026 1,O=DigiCert\, Inc.,C=US

Serial Number

08:4f:dc:33:4f:7e:45:4e:db:c3:0f:8f:f9:92:18:35

Issuer

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Aug 5, 2026 - Nov 4, 2037

Subject

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Serial Number

0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

May 7, 2025 - Jan 14, 2038

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

Major OS version

Entry point

7048280

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\0713\aha_doctor\src\out\output\aha_doctor.pdb

ws2_32

WSCEnumProtocols WSAGetLastError WSAStringToAddressW ntohl InetPtonW WSACleanup bind WSAGetOverlappedResult WSAEnumNameSpaceProvidersW WSAStartup WSAEnumNetworkEvents recv WSAResetEvent WSAEventSelect inet_ntop inet_addr recvfrom inet_ntoa freeaddrinfo getaddrinfo connect socket getsockname WSACreateEvent shutdown gethostbyname closesocket WSCGetProviderPath WSACloseEvent htons ntohs setsockopt ioctlsocket WSASend WSAIoctl accept gethostname WSASocketW sendto WSARecvFrom htonl getsockopt getpeername WSAAddressToStringA WSASendTo

imm32

ImmSetCompositionWindow ImmReleaseContext ImmGetContext ImmDisableIME

comctl32

InitCommonControlsEx _TrackMouseEvent ord17

gdiplus

GdipDrawLine GdipFree GdipSetPenDashStyle GdipCreateSolidFill GdipCreatePath GdipSetSmoothingMode GdipGetImagePixelFormat GdipGraphicsClear GdipDisposeImage GdipDrawImageRectI GdipCloneImage GdipGetImageHeight GdiplusShutdown GdiplusStartup GdipImageGetFrameDimensionsCount GdipGetImagePaletteSize GdipDeleteMatrix GdipCreateMatrix GdipGetPropertyItem GdipCreateBitmapFromStream GdipCreateHBITMAPFromBitmap GdipImageSelectActiveFrame GdipImageGetFrameDimensionsList GdipImageGetFrameCount GdipGetImagePalette GdipCreateFromHDC GdipAddPathPieI GdipAddPathRectangleI GdipAddPathArcI GdipAddPathEllipseI GdipTransformPath GdipAddPathCurveI GdipAddPathBezierI GdipResetPath GdipAddPathLine2I GdipAddPathLineI GdipIsVisiblePathPointI GdipAddPathPolygonI GdipSetPenDashArray GdipClonePath GdipStartPathFigure GdipGetPathWorldBoundsI GdipSetPathFillMode GdipGetPathFillMode GdipDrawRectangleI GdipCreateFontFromLogfontA GdipDrawEllipseI GdipSetStringFormatLineAlign GdipSetStringFormatTrimming GdipDrawBezierI GdipFillRectangle GdipClosePathFigure GdipCreateFontFromDC GdipDeletePath GdipDrawString GdipBitmapLockBits GdipFillEllipseI GdipCreateBitmapFromHBITMAP GdipCloneStringFormat GdipStringFormatGetGenericTypographic GdipMeasureString GdipAddPathArc GdipBitmapUnlockBits GdipFillEllipse GdipDeleteStringFormat GdipDeleteFont GdipSetStringFormatAlign GdipCloneBrush GdipDeleteGraphics GdipCreateBitmapFromGdiDib GdipCreateTexture GdipSetTextRenderingHint GdipGetImageGraphicsContext GdipFillRectangleI GdipGetImageWidth GdipCreateBitmapFromScan0 GdipDrawImageI GdipAddPathLine GdipDrawLineI GdipSetStringFormatFlags GdipScaleMatrix GdipDeleteBrush GdipDrawLines GdipDeletePen GdipCreatePen1 GdipFillPath GdipIsOutlineVisiblePathPointI GdipAddPathLine2 GdipAlloc GdipGetPropertyItemSize GdipDrawPath GdipDrawImageRect GdipDrawArc GdipCreatePen2 GdipTranslateMatrix GdipSetLineBlend GdipGetPenDashStyle GdipSetPenDashCap197819 GdipGetPenEndCap GdipGetPenStartCap GdipSetPenColor GdipSetPenStartCap GdipGetPenLineJoin GdipClonePen GdipGetPenWidth GdipSetPenWidth GdipGetPenDashCap197819 GdipSetPenLineJoin GdipSetPenEndCap GdipLoadImageFromFile GdipImageRotateFlip GdipRotateMatrix GdipCreateLineBrushFromRect GdipSetWorldTransform

msimg32

AlphaBlend

version

GetFileVersionInfoSizeW GetFileVersionInfoW VerQueryValueW

wintrust

CryptCATAdminCalcHashFromFileHandle CryptCATAdminAcquireContext CryptCATAdminEnumCatalogFromHash CryptCATAdminReleaseContext CryptCATAdminReleaseCatalogContext CryptCATCatalogInfoFromContext

wininet

InternetSetOptionW InternetCloseHandle InternetOpenW InternetOpenUrlW

fwpuclnt

FwpmFreeMemory0 FwpmProviderCreateEnumHandle0 FwpmProviderDestroyEnumHandle0 FwpmEngineClose0 FwpmEngineOpen0 FwpmProviderEnum0

crypt32

CryptMsgGetParam CertCloseStore CryptQueryObject CertControlStore CertGetEnhancedKeyUsage CertAddStoreToCollection CertFreeCertificateContext CertOpenStore CertOpenSystemStoreA CertGetNameStringW CertFindCertificateInStore CryptMsgClose

iphlpapi

GetIfTable2 GetAdaptersInfo GetIpForwardTable GetIpForwardTable2 Icmp6CreateFile Icmp6SendEcho2 IcmpCreateFile GetAdaptersAddresses IcmpCloseHandle IcmpSendEcho FreeMibTable GetIfEntry2

secur32

QueryContextAttributesW AcquireCredentialsHandleW FreeCredentialsHandle InitializeSecurityContextW QuerySecurityPackageInfoW DeleteSecurityContext FreeContextBuffer

winhttp

WinHttpOpenRequest WinHttpSetOption WinHttpCloseHandle WinHttpReceiveResponse WinHttpQueryHeaders WinHttpSetTimeouts WinHttpConnect WinHttpCrackUrl WinHttpGetIEProxyConfigForCurrentUser WinHttpGetDefaultProxyConfiguration WinHttpReadData WinHttpAddRequestHeaders WinHttpSendRequest WinHttpOpen WinHttpWriteData WinHttpGetProxyForUrl

normaliz

NormalizeString IdnToAscii

dxgi

CreateDXGIFactory1

powrprof

CallNtPowerInformation

pdh

PdhOpenQueryW PdhExpandWildCardPathW PdhAddCounterW PdhGetFormattedCounterValue PdhCollectQueryData PdhCloseQuery

ole32

CreateStreamOnHGlobal CoSetProxyBlanket StringFromGUID2 CoRevokeInitializeSpy CoTaskMemFree CoCreateInstance CoInitializeEx CoUninitialize CLSIDFromString

shell32

DragAcceptFiles DragFinish DragQueryFileW SHCreateItemFromParsingName ExtractIconExW SHGetKnownFolderPath ShellExecuteW SHGetFolderPathW ord680 ShellExecuteExW CommandLineToArgvW

wevtapi

EvtQuery EvtNext EvtRender EvtClose EvtCreateRenderContext

xmllite

CreateXmlReader

advapi32

LookupPrivilegeValueW IsValidAcl SystemFunction036 ConvertStringSidToSidW IsValidSid ConvertSidToStringSidW RegNotifyChangeKeyValue SetSecurityInfo IsValidSecurityDescriptor GetSecurityDescriptorOwner GetSecurityDescriptorControl GetSecurityDescriptorGroup GetSecurityDescriptorDacl GetSecurityDescriptorSacl RegDeleteKeyExW RegCreateKeyExW RegDeleteValueW RegEnumValueW CreateProcessAsUserW CreateProcessWithTokenW DuplicateTokenEx GetAclInformation GetAce EqualSid SetEntriesInAclW SetNamedSecurityInfoW CopySid GetNamedSecurityInfoW AddAce InitializeAcl GetLengthSid EnableTraceEx StartTraceW ProcessTrace CloseTrace ControlTraceW OpenTraceW EnableTraceEx2 PerfQueryCounterData PerfAddCounters PerfOpenQueryHandle GetTokenInformation PerfCloseQueryHandle RegSetValueExW RegQueryInfoKeyW QueryServiceConfigW QueryServiceStatus OpenServiceW RegCloseKey RegOpenKeyExW RegQueryValueExW CloseServiceHandle OpenSCManagerW RegEnumKeyExW EnumServicesStatusExW BuildTrusteeWithSidW AdjustTokenPrivileges OpenProcessToken ConvertStringSecurityDescriptorToSecurityDescriptorW

dbghelp

SymCleanup SymSetSearchPathW SymGetLineFromAddr64 SymInitialize SymGetSearchPathW SymSetOptions MiniDumpReadDumpStream MiniDumpWriteDump SymFromAddr

tdh

TdhGetProperty TdhGetPropertySize

shlwapi

StrStrIA PathIsRelativeW PathFileExistsW PathCommonPrefixW SHCreateStreamOnFileW StrTrimW StrStrIW PathMatchSpecW ord487 PathAppendW

winmm

timeBeginPeriod timeGetTime timeSetEvent timeKillEvent timeEndPeriod

cfgmgr32

CM_Get_Device_IDW CM_Get_DevNode_Status

ntdll

RtlUnwindEx RtlVirtualUnwind RtlLookupFunctionEntry RtlPcToFileHeader RtlCaptureContext NtDeleteKey RtlNtStatusToDosError VerSetConditionMask NtQueryObject RtlUnwind NtReadVirtualMemory NtQueryInformationProcess NtQuerySystemInformation RtlGetVersion RtlGetCompressionWorkSpaceSize RtlCaptureStackBackTrace

kernel32

PostQueuedCompletionStatus Process32FirstW K32GetPerformanceInfo GetSystemTimes CreateIoCompletionPort SetEnvironmentVariableW TlsGetValue WakeAllConditionVariable WakeConditionVariable InitializeConditionVariable SleepConditionVariableSRW AcquireSRWLockExclusive TlsAlloc TlsFree InitializeSRWLock InitOnceExecuteOnce ReleaseSRWLockShared AcquireSRWLockShared GetSystemInfo GetQueuedCompletionStatus GetSystemTime GetLogicalProcessorInformation GetBinaryTypeA QueryFullProcessImageNameW GetThreadId GetSystemFirmwareTable QueryDosDeviceW GetLogicalDriveStringsW GetDiskFreeSpaceExW FindFirstChangeNotificationW FindCloseChangeNotification RegisterWaitForSingleObject UnregisterWaitEx InitializeProcThreadAttributeList UpdateProcThreadAttribute TlsSetValue GetSystemTimeAsFileTime FormatMessageW GetUserDefaultUILanguage DuplicateHandle Module32FirstW Module32NextW GetComputerNameExW GetBinaryTypeW GetProcessTimes GetModuleHandleA LCMapStringW WideCharToMultiByte GetUserDefaultLangID GetDriveTypeW lstrcmpiW GetFileSizeEx GetLogicalDrives GetVolumeInformationW QueryThreadCycleTime GetNativeSystemInfo GetProductInfo FlushFileBuffers SetFilePointerEx SystemTimeToFileTime LCIDToLocaleName DeviceIoControl SetFileInformationByHandle DeleteFileW SearchPathW MoveFileW SetEndOfFile GetFileInformationByHandle GetProcessId InitOnceComplete InitOnceBeginInitialize WaitForSingleObjectEx SwitchToThread GetExitCodeThread GetStringTypeW EncodePointer CopyFileW ReplaceFileW SetCurrentDirectoryW GetFileAttributesExW GetLogicalProcessorInformationEx CreateFileMappingA lstrlenW SystemTimeToTzSpecificLocalTime CreateFileMappingW GetFileTime IsWow64Process CreateProcessW SetFileAttributesW GetTempPathW GetFinalPathNameByHandleW RemoveDirectoryW GetLongPathNameW LCMapStringEx CompareStringEx GetCPInfo UnhandledExceptionFilter IsProcessorFeaturePresent GetStartupInfoW InitializeSListHead OutputDebugStringW InitializeCriticalSectionAndSpinCount ExitProcess SetConsoleCtrlHandler ExitThread Process32NextW SetStdHandle GetFileType GetConsoleMode ReadConsoleW GetConsoleOutputCP GetTimeZoneInformation HeapAlloc HeapFree FlsAlloc FlsGetValue FlsSetValue FlsFree CreateDirectoryW GetEnvironmentStringsW GlobalFree ReleaseSRWLockExclusive TryAcquireSRWLockExclusive FindNextFileW FindClose DecodePointer RaiseException GetCurrentDirectoryW GetSystemWow64DirectoryW FreeEnvironmentStringsW AssignProcessToJobObject GetStdHandle SetHandleInformation GetExitCodeProcess InitializeCriticalSectionEx GetCommandLineW GetModuleHandleExW FormatMessageA OutputDebugStringA IsDebuggerPresent GetThreadPriority SetThreadPriority ReadFile SetNamedPipeHandleState CreateNamedPipeA WriteFile WaitForMultipleObjects GetNamedPipeClientProcessId WaitForSingleObject DisconnectNamedPipe CreateEventW GetTickCount64 GetLastError CreateFileA SetEvent CloseHandle CancelIoEx CreateThread ResetEvent GetOverlappedResult LocalFree GetCurrentProcessId ConnectNamedPipe GetLocaleInfoA GetProcAddress GetModuleHandleW WritePrivateProfileStringW GetCurrentProcess GetModuleFileNameW CreateMutexW GetPrivateProfileStringW FindFirstFileExW GetFileAttributesW GetWindowsDirectoryW LocalAlloc ExpandEnvironmentStringsW SizeofResource EnterCriticalSection ReleaseSemaphore LeaveCriticalSection InitializeCriticalSection SetErrorMode CreateFileW GetCurrentThreadId GetCurrentThread TerminateThread LockResource LoadLibraryW LoadResource FindResourceW DeleteCriticalSection CreateSemaphoreW IsBadReadPtr VirtualQueryEx SetUnhandledExceptionFilter Sleep GetTimeFormatEx GetDateFormatEx FileTimeToSystemTime FileTimeToLocalFileTime GetSystemDirectoryA GetSystemDirectoryW GlobalMemoryStatusEx GetVersionExW WriteConsoleW LoadLibraryExW FreeLibrary SetLastError VirtualQuery UnmapViewOfFile OpenFileMappingA MapViewOfFile SetThreadContext GetLocalTime FlushInstructionCache GetThreadContext VirtualProtectEx ResumeThread SuspendThread VirtualAlloc VirtualFree VirtualProtect CompareStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW GetFullPathNameW HeapReAlloc HeapSize HeapQueryInformation IsValidCodePage GetACP GetOEMCP DeleteProcThreadAttributeList Wow64RevertWow64FsRedirection Wow64DisableWow64FsRedirection GetEnvironmentVariableW GetFileSize MultiByteToWideChar OpenProcess CreateToolhelp32Snapshot GlobalAlloc QueryPerformanceCounter QueryPerformanceFrequency FreeLibraryAndExitThread MulDiv VerifyVersionInfoW lstrcmpiA GetCommandLineA GlobalUnlock GlobalLock GlobalSize GetProcessHeap TerminateProcess GetTickCount MoveFileExW

user32

ReleaseCapture GetAncestor GetActiveWindow PostMessageW CreatePopupMenu TrackPopupMenu DestroyMenu AppendMenuW SetForegroundWindow GetCursorPos GetWindowThreadProcessId AllowSetForegroundWindow FindWindowExW CharLowerBuffA SetTimer CharUpperW SendMessageTimeoutW IsWindow CharLowerBuffW EnableWindow EndPaint BeginPaint SetCapture ReleaseDC InvalidateRect IsClipboardFormatAvailable UnregisterClassW LoadImageW PtInRect GetIconInfo DestroyIcon GetClassInfoExW UpdateLayeredWindow FindWindowW GetClientRect GetDesktopWindow LoadCursorW GetShellWindow GetUpdateRect SetPropW IsWindowVisible MessageBoxW SetWindowRgn RegisterClipboardFormatW GetClipboardOwner SetFocus GetPriorityClipboardFormat EnumClipboardFormats GetClipboardFormatNameW RemoveClipboardFormatListener GetClipboardSequenceNumber IsZoomed IsRectEmpty MoveWindow MapWindowPoints GetAsyncKeyState GetParent OpenClipboard UnionRect OffsetRect RegisterClassW MonitorFromPoint GetMonitorInfoW RegisterClassExW CharNextW GetWindowLongPtrW SetWindowTextW GetSystemMetrics IntersectRect SetCursor WindowFromPoint AddClipboardFormatListener IsIconic ChangeWindowMessageFilterEx ShowWindow SetWindowPos SetWindowLongW KillTimer GetWindowLongW GetMessageW SendMessageW DefWindowProcW GetKeyState ScreenToClient CreateWindowExW CallWindowProcW EnumDisplaySettingsW EnumDisplayDevicesW ClientToScreen CloseClipboard CharUpperBuffA EmptyClipboard GetWindow GetSysColor GetWindowRect PostQuitMessage GetQueueStatus MsgWaitForMultipleObjectsEx PeekMessageW GetFocus GetClipboardData DestroyWindow IsHungAppWindow GetDC GetKeyboardState GetRawInputDeviceInfoW DispatchMessageW MapVirtualKeyExW GetRawInputData GetKeyboardLayout ToUnicodeEx GetForegroundWindow RegisterRawInputDevices TranslateMessage PostThreadMessageW GetKeyNameTextW GetPropW MonitorFromWindow SetClipboardData SetWindowLongPtrW

gdi32

GetWindowOrgEx DeleteDC SetStretchBltMode RestoreDC GetObjectA StretchBlt CreateCompatibleDC SetWindowOrgEx SaveDC ExtSelectClipRgn CreateRectRgnIndirect SelectObject D3DKMTQueryAdapterInfo CreateCompatibleBitmap CreateDIBSection CreateFontIndirectW DeleteObject GetObjectW CreateRoundRectRgn GetStockObject GetDeviceCaps BitBlt

setupapi

SetupDiDestroyDeviceInfoList SetupDiEnumDeviceInterfaces SetupDiGetDeviceRegistryPropertyW SetupDiBuildDriverInfoList SetupDiEnumDriverInfoW SetupDiDestroyDriverInfoList SetupDiEnumDeviceInfo SetupDiGetDeviceInterfaceDetailW SetupDiGetClassDevsW

oleaut32

SysAllocStringLen VariantTimeToSystemTime VariantInit SysFreeString SysStringLen VariantClear

mpr

WNetCloseEnum WNetEnumResourceW WNetOpenEnumW

userenv

CreateEnvironmentBlock DestroyEnvironmentBlock

applogrs

AppLog_launch AppLog_onEvent AppLog_setHttpClient AppLog_init AppLog_addCustomHeader AppLog_setDbDir AppLog_registerDidObserver AppLog_flush AppLog_terminate AppLog_getDeviceId

Name

.text

Size

6.9MB

Virtual Size

6.9MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

1.2MB

Virtual Size

1.2MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

193KB

Virtual Size

230KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

290KB

Virtual Size

290KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.detourc

Size

8KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.detourd

Size

512B

Virtual Size

24B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

315KB

Virtual Size

315KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

57KB

Virtual Size

57KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-10-22_ac39b1980208d9e50512de7182174f7e_akira_blankgrabber_glassworm_icedid_luca-stealer_njrat_stealc

PE Signature issue

ws2_32

imm32

comctl32

gdiplus

msimg32

version

wintrust

wininet

fwpuclnt

crypt32

iphlpapi

secur32

winhttp

normaliz

dxgi

powrprof

pdh

ole32

shell32

wevtapi

xmllite

advapi32

dbghelp

tdh

shlwapi

winmm

cfgmgr32

ntdll

kernel32

user32

gdi32

setupapi

oleaut32

mpr

userenv

applogrs

generic