2026-11-01_8e75cb16fef8d5fe269b7fc6c44fef0e_cobalt-strike_glassworm_icedid_luca-stealer_njrat_stealc_vidar

Sharing

Copy URL Twitter E-mail

General

Target
2026-11-01_8e75cb16fef8d5fe269b7fc6c44fef0e_cobalt-strike_glassworm_icedid_luca-stealer_njrat_stealc_vidar
Size 8.9MB
Sample261102-shtyrsfd95
SHA256 4840df2245b66f9358244c1191b02f7fd18f71d0d15e7da4fd81e24dacdab902
MD5 8e75cb16fef8d5fe269b7fc6c44fef0e
SHA1 e68096c2b4972096052cad6d0c80bb2ef33a7f4a
SHA512 fdcc905ec4263f65c74ca5d9bf78647e0757221b70a730fc2c542d9aa688f3b21679ca01815e002f917984deab678c67afbe174fe06a002432c907048fff6f2b
SSDEEP 98304:Pm9sKrgIVFluoeR8tRDInUPLZ3YYv0h7bOeOSTpmnUF:RK+6gZOeO4pmnUF
TLSH
T1A3965B5797AC80ECE1A6E23C8A278913D7B17C05037596DF4B808E561F6B7D09E3EB21
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

Malware Config

Signatures

Codesign digest Mismatch 1 IoCs

File was altered after it was signed.

resource
2026-11-01_8e75cb16fef8d5fe269b7fc6c44fef0e_cobalt-strike_glassworm_icedid_luca-stealer_njrat_stealc_vidar

File Explorer

2026-11-01_8e75cb16fef8d5fe269b7fc6c44fef0e_cobalt-strike_glassworm_icedid_luca-stealer_njrat_stealc_vidar

.exe 8.9MB

2026-11-01_8e75cb16fef8d5fe269b7fc6c44fef0e_cobalt-strike_glassworm_icedid_luca-stealer_njrat_stealc_vidar

IMPHASH 149167902b130777f90f9da3a64cb2f0
SHA256 4840df2245b66f9358244c1191b02f7fd18f71d0d15e7da4fd81e24dacdab902
MD5 8e75cb16fef8d5fe269b7fc6c44fef0e
SHA1 e68096c2b4972096052cad6d0c80bb2ef33a7f4a
SHA512 fdcc905ec4263f65c74ca5d9bf78647e0757221b70a730fc2c542d9aa688f3b21679ca01815e002f917984deab678c67afbe174fe06a002432c907048fff6f2b
SSDEEP 98304:Pm9sKrgIVFluoeR8tRDInUPLZ3YYv0h7bOeOSTpmnUF:RK+6gZOeO4pmnUF
TLSH
T1A3965B5797AC80ECE1A6E23C8A278913D7B17C05037596DF4B808E561F6B7D09E3EB21
MD5 SHA1 SHA512 SSDEEP TLSH

Codesign digest Mismatch

File was altered after it was signed.

PE Signature issue

Digest

22:72:8f:5f:d6:e3:0a:7d:8c:30:0a:50:b6:cf:e8:2c:11:da:fc:03:df:7d:85:81:12:46:0f:98:a1:69:57:cd

Digest Algorithm

sha256

PE Digests Matches

Not matched

Trusted

Signing Certificate

SERIALNUMBER=2748129,CN=Adobe Inc.,OU=Acrobat DC,O=Adobe Inc.,L=San Jose,ST=ca,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553

Chains

Nov 17, 2025

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

Serial Number

0e:84:8e:a3:9b:36:d7:bb:53:3c:f4:3d:96:d6:e1:3e

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Oct 6, 2025 - Oct 5, 2027

Subject

CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US

Serial Number

0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68

Issuer

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jun 4, 2025 - Sep 3, 2036

Subject

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Serial Number

0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

May 7, 2025 - Jan 14, 2038

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

Major OS version

Entry point

5621424

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

AcroTray.pdb

version

GetFileVersionInfoA GetFileVersionInfoSizeA VerQueryValueW GetFileVersionInfoW GetFileVersionInfoSizeW VerQueryValueA

winhttp

WinHttpSetCredentials WinHttpQueryAuthSchemes WinHttpReceiveResponse WinHttpQueryHeaders WinHttpSendRequest WinHttpSetOption WinHttpSetStatusCallback WinHttpCrackUrl WinHttpOpen WinHttpCloseHandle WinHttpConnect WinHttpReadData WinHttpQueryDataAvailable WinHttpAddRequestHeaders WinHttpSetTimeouts WinHttpOpenRequest WinHttpGetProxyForUrl WinHttpGetIEProxyConfigForCurrentUser

wininet

InternetSetOptionW

kernel32

GlobalFree GlobalAlloc GetProcessId GetShortPathNameW GetFileAttributesA GetUserDefaultLCID GetSystemInfo GetUserDefaultLangID GetUserDefaultUILanguage MulDiv IsBadWritePtr GetModuleFileNameA CreateSemaphoreExW CreateMutexExW WaitForSingleObjectEx OutputDebugStringW DebugBreak IsDebuggerPresent CreateSemaphoreW OpenSemaphoreW ReleaseSemaphore CreateThread CreateNamedPipeW ConnectNamedPipe FileTimeToSystemTime LocalAlloc GetComputerNameExW CreateProcessW CreatePipe RaiseException SetHandleInformation GetTimeFormatW GetDateFormatW GetLocalTime GetFileInformationByHandleEx SetFileAttributesW GetFileAttributesW FindClose DeleteFileW ReadDirectoryChangesW CreateWaitableTimerW WaitForMultipleObjects CancelWaitableTimer SetWaitableTimer CreateEventW ResetEvent SetEvent GetOverlappedResult GetProcAddress GetModuleHandleW FreeLibrary GetSystemFirmwareTable GetNativeSystemInfo GetVersionExW GetWindowsDirectoryW GetSystemDirectoryW GetCurrentProcess DeviceIoControl GetVolumePathNameW FindNextFileW FindFirstFileW LeaveCriticalSection EnterCriticalSection InitializeCriticalSection GetCurrentProcessId GetCurrentThreadId CreateMutexW WaitForSingleObject ReleaseMutex FormatMessageW LocalFree VerifyVersionInfoW VerSetConditionMask TerminateProcess QueryActCtxW FindActCtxSectionStringW LoadLibraryExW ActivateActCtx CreateActCtxW lstrcpyA LoadLibraryW FindResourceW SizeofResource LockResource LoadResource GetModuleHandleExW GetModuleFileNameW FindResourceExW DeleteCriticalSection GetProcessHeap HeapSize HeapFree HeapReAlloc HeapAlloc HeapDestroy WriteConsoleW SetEnvironmentVariableW FreeEnvironmentStringsW GetEnvironmentStringsW GetOEMCP GetACP IsValidCodePage FindFirstFileExW ReadConsoleW SetFilePointerEx GetConsoleMode GetConsoleOutputCP EnumSystemLocalesW IsValidLocale LCMapStringW FlsFree FlsSetValue FlsGetValue FlsAlloc GetStdHandle ExitProcess SetStdHandle VirtualQuery VirtualAlloc GetCommandLineW GetCommandLineA HeapQueryInformation GetTimeZoneInformation PeekNamedPipe GetFileType GetFileInformationByHandle GetDriveTypeW MoveFileExW FreeLibraryAndExitThread ExitThread RtlUnwindEx SetLastError DecodePointer OutputDebugStringA WideCharToMultiByte GetTempPathW GetFileSizeEx MultiByteToWideChar GetCurrentDirectoryW SetCurrentDirectoryW lstrlenW GetTickCount Sleep OpenMutexW InitializeCriticalSectionEx SetNamedPipeHandleState GetLastError CloseHandle WriteFile GetCPInfo CompareStringEx DeactivateActCtx GetEnvironmentVariableW LCMapStringEx GetStringTypeW CloseThreadpoolWork SubmitThreadpoolWork CreateThreadpoolWork FreeLibraryWhenCallbackReturns GetExitCodeThread RtlUnwind InitOnceBeginInitialize QueryPerformanceFrequency RtlPcToFileHeader GetLocaleInfoEx WakeConditionVariable FormatMessageA TryAcquireSRWLockExclusive InitializeSListHead GetSystemTimeAsFileTime QueryPerformanceCounter GetStartupInfoW IsProcessorFeaturePresent SetUnhandledExceptionFilter ReadFile GetVolumeInformationW CreateFileW InitOnceComplete UnhandledExceptionFilter RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext GlobalSize GlobalUnlock GlobalLock CopyFileW FlushFileBuffers GetFileSize GetFullPathNameW LockFile SetEndOfFile SetFilePointer UnlockFile DuplicateHandle lstrcmpiW InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree GlobalReAlloc GlobalHandle LocalReAlloc CompareStringW lstrcmpA GlobalGetAtomNameW FileTimeToLocalFileTime GetFileAttributesExW GetFileTime SystemTimeToTzSpecificLocalTime SetThreadPriority ResumeThread GlobalAddAtomW GlobalFlags lstrcmpW EncodePointer GlobalDeleteAtom GlobalFindAtomW GetLocaleInfoW VirtualProtect lstrcpyW GetTickCount64 GetProfileIntW SearchPathW GetTempFileNameW ReleaseSRWLockExclusive AcquireSRWLockExclusive WakeAllConditionVariable SleepConditionVariableSRW

user32

CharUpperW UnhookWindowsHookEx IsWindowEnabled GetWindowLongW GetLastActivePopup GetSysColorBrush GetWindowTextW GetWindowTextLengthW PeekMessageW GetKeyState ValidateRect SetWindowsHookExW CallNextHookEx DestroyIcon GetDlgCtrlID GetFocus SetWindowTextW PtInRect GetWindow RealChildWindowFromPoint SetFocus SetScrollPos GetScrollPos GetDlgItem CheckDlgButton SetWindowLongW IsDialogMessageW DrawTextExW GrayStringW TabbedTextOutW GetWindowDC FillRect EnableMenuItem SetMenuItemBitmaps GetMenuCheckMarkDimensions SetMenuItemInfoW LoadBitmapW GetMessagePos GetMessageTime CallWindowProcW RegisterClassW GetClassInfoW IsMenu IsChild GetWindowPlacement SetWindowPlacement BeginDeferWindowPos DeferWindowPos EndDeferWindowPos IsIconic GetCapture GetMenu SetMenu RemoveMenu SetActiveWindow RedrawWindow ScrollWindow SetScrollRange GetScrollRange ShowScrollBar SetPropW GetPropW RemovePropW MapWindowPoints CopyRect EqualRect GetClassLongPtrW GetTopWindow LoadIconW SetScrollInfo GetScrollInfo WinHelpW MonitorFromWindow InflateRect IntersectRect GetMenuItemInfoW CopyImage SendDlgItemMessageA SetRectEmpty OffsetRect CreateDialogIndirectParamW EndDialog GetNextDlgTabItem MapDialogRect ShowOwnedPopups SetCursor DeleteMenu InvalidateRect AppendMenuW GetNextDlgGroupItem SetCapture ReleaseCapture WindowFromPoint DrawFocusRect IsRectEmpty DrawIconEx GetIconInfo MessageBeep EnableScrollBar HideCaret InvertRect NotifyWinEvent CreatePopupMenu GetMenuDefaultItem MapVirtualKeyW GetKeyNameTextW SetLayeredWindowAttributes EnumDisplayMonitors OpenClipboard CloseClipboard SetClipboardData EmptyClipboard DrawStateW SetWindowRgn SetParent DrawEdge DrawFrameControl IsZoomed GetSystemMenu SetCursorPos CopyIcon FrameRect DrawIcon UnionRect UpdateLayeredWindow MonitorFromPoint LoadAcceleratorsW TranslateAcceleratorW InsertMenuItemW UnpackDDElParam ReuseDDElParam GetComboBoxInfo PostThreadMessageW WaitMessage GetKeyboardLayout IsCharLowerW MapVirtualKeyExW ToUnicodeEx GetKeyboardState CreateAcceleratorTableW DestroyAcceleratorTable CopyAcceleratorTableW LockWindowUpdate SetMenuDefaultItem GetDoubleClickTime ModifyMenuW RegisterClipboardFormatW CharUpperBuffW IsClipboardFormatAvailable GetUpdateRect DrawMenuBar DefFrameProcW DefMDIChildProcW TranslateMDISysAccel SubtractRect LoadCursorW GetWindowRgn DestroyCursor InsertMenuW GetMenuItemCount GetMenuItemID GetDesktopWindow SetWindowLongPtrW GetWindowLongPtrW GetWindowRect EnableWindow DestroyWindow CreateWindowExW GetClassInfoExW RegisterClassExW PostQuitMessage DefWindowProcW DispatchMessageW TranslateMessage GetMessageW GetAncestor SetRect GetActiveWindow MessageBoxW SendMessageW UnregisterClassW IsWindow FindWindowW PostMessageW AttachThreadInput ShowWindow SetWindowPos BringWindowToTop GetForegroundWindow GetMenuState ReleaseDC GetDC GetMenuStringW TrackMouseEvent UpdateWindow CreateMenu SetForegroundWindow GetClientRect AdjustWindowRectEx GetWindowThreadProcessId GetSystemMetrics SystemParametersInfoW FindWindowExW MoveWindow RegisterWindowMessageW LoadImageW GetClassNameW EnumThreadWindows GetParent SetClassLongPtrW GetSysColor ScreenToClient ClientToScreen GetCursorPos EndPaint BeginPaint DrawTextW TrackPopupMenu GetSubMenu CheckMenuItem DestroyMenu LoadMenuW KillTimer SetTimer SendDlgItemMessageW SetDlgItemTextW CreateDialogParamW IsWindowVisible WaitForInputIdle LoadStringW GetMonitorInfoW MonitorFromRect GetAsyncKeyState

gdi32

CreateRectRgn CreateSolidBrush CreatePatternBrush ExcludeClipRect GetClipBox GetObjectType GetPixel CreatePen GetWindowExtEx IntersectClipRect LineTo PtVisible RectVisible RestoreDC SaveDC SelectClipRgn ExtSelectClipRgn SelectPalette SetBkMode SetMapMode SetLayout CreateHatchBrush CreateCompatibleDC CreateBitmap BitBlt DeleteObject DeleteDC CreateDCW CopyMetaFileW GetViewportExtEx SetViewportOrgEx SetViewportExtEx GetBoundsRect PtInRegion TextOutW ExtFloodFill SetPaletteEntries SetPixelV GetWindowOrgEx GetViewportOrgEx GetTextFaceW Escape GetLayout SetPolyFillMode SetROP2 SetWindowExtEx ExtTextOutW SetTextColor SetBkColor SelectObject GetStockObject GetDeviceCaps SetTextAlign GetObjectW MoveToEx FrameRgn FillRgn RoundRect OffsetRgn GetRgnBox Rectangle LPtoDP CreateRoundRectRgn Polyline Polygon CreatePolygonRgn GetTextColor Ellipse CreateEllipticRgn SetDIBColorTable CreateDIBSection StretchBlt SetPixel GetTextCharsetInfo EnumFontFamiliesW CreateDIBitmap CreateCompatibleBitmap GetBkColor RealizePalette GetSystemPaletteEntries GetPaletteEntries GetNearestPaletteIndex CreatePalette EnumFontFamiliesExW GetTextMetricsW GetTextExtentPoint32W DPtoLP SetRectRgn PatBlt CreateRectRgnIndirect CreateFontIndirectW CombineRgn ScaleWindowExtEx ScaleViewportExtEx OffsetWindowOrgEx OffsetViewportOrgEx SetWindowOrgEx

winspool.drv

ClosePrinter GetJobW OpenPrinterW DocumentPropertiesW

advapi32

RegQueryValueExA RegEnumKeyExW RegCreateKeyExW RegOpenKeyExW RegQueryValueExW RegSetValueExW CredWriteW CredReadW CredEnumerateW CredDeleteW CredFree GetUserNameW RegDeleteKeyExW RegEnumValueW AllocateAndInitializeSid FreeSid InitializeSecurityDescriptor SetSecurityDescriptorDacl SetEntriesInAclW RegFlushKey RegOpenKeyW RegOpenKeyExA RegDeleteValueW RegNotifyChangeKeyValue RegCreateKeyA RegCreateKeyW RegDeleteKeyW RegOpenKeyA RegQueryValueW RegDeleteKeyA RegSetValueExA EventRegister EventSetInformation EventWriteTransfer EventUnregister RegGetValueW RegCloseKey

shell32

Shell_NotifyIconW SHGetFileInfoW SHGetPathFromIDListW SHGetSpecialFolderLocation SHGetDesktopFolder DragQueryFileW DragFinish SHBrowseForFolderW ShellExecuteW ShellExecuteExW SHGetSpecialFolderPathW SHAppBarMessage SHGetKnownFolderPath SHCreateDirectoryExW

ole32

OleGetClipboard DoDragDrop RegisterDragDrop RevokeDragDrop OleCreateMenuDescriptor OleDestroyMenuDescriptor IsAccelerator CreateStreamOnHGlobal CoDisconnectObject ReleaseStgMedium OleDuplicateData CoUninitialize CoInitializeEx CoCreateInstance CoSetProxyBlanket CoTaskMemFree CoInitialize CoCreateGuid CoTaskMemAlloc OleCreate OleSetContainedObject OleLockRunning OleInitialize OleTranslateAccelerator OleUninitialize CoLockObjectExternal

oleaut32

VarBstrFromDate VariantCopy VariantTimeToSystemTime SystemTimeToVariantTime LoadTypeLi SafeArrayAccessData SafeArrayGetLBound SafeArrayGetUBound SysAllocStringLen SysFreeString SysAllocString VariantChangeType VariantClear VariantInit SysStringLen

msimg32

TransparentBlt AlphaBlend

shlwapi

PathFindExtensionW PathStripToRootW PathIsUNCW UrlCanonicalizeW PathRenameExtensionW PathRemoveExtensionW PathIsFileSpecW PathIsDirectoryW PathFindFileNameW PathAppendW PathAddExtensionW UrlEscapeW StrFormatKBSizeW PathFileExistsW PathRemoveFileSpecW

uxtheme

IsAppThemed DrawThemeText DrawThemeParentBackground OpenThemeData CloseThemeData DrawThemeBackground GetThemeColor GetCurrentThemeName GetThemePartSize GetWindowTheme IsThemeBackgroundPartiallyTransparent GetThemeSysColor

bcrypt

BCryptDestroyKey BCryptDecrypt BCryptEncrypt BCryptGenerateSymmetricKey BCryptSetProperty BCryptDestroyHash BCryptOpenAlgorithmProvider BCryptGetProperty BCryptVerifySignature BCryptCreateHash BCryptHashData BCryptFinishHash BCryptCloseAlgorithmProvider

crypt32

CertCloseStore CertOpenStore CryptImportPublicKeyInfoEx2 CryptHashCertificate2 CertCreateCertificateContext CertVerifySubjectCertificateContext CertFreeCertificateContext CryptUnprotectData CryptProtectData CryptQueryObject CertNameToStrA CryptMsgGetParam CryptStringToBinaryW CertFindCertificateInStore CertAddCertificateContextToStore

secur32

GetUserNameExW

ws2_32

WSAStartup getnameinfo WSACleanup

iphlpapi

GetAdaptersAddresses

wintrust

WinVerifyTrust

gdiplus

GdipCreateBitmapFromScan0 GdipBitmapLockBits GdipCreateBitmapFromStream GdipBitmapUnlockBits GdipGetImagePaletteSize GdipGetImagePalette GdipGetImagePixelFormat GdipGetImageHeight GdipGetImageWidth GdipGetImageGraphicsContext GdipDisposeImage GdipCloneImage GdiplusStartup GdipFree GdipAlloc GdiplusShutdown GdipDeleteGraphics GdipDrawImageI GdipCreateBitmapFromHBITMAP GdipCreateFromHDC GdipSetInterpolationMode GdipDrawImageRectI

oleacc

CreateStdAccessibleObject AccessibleObjectFromWindow LresultFromObject

imm32

ImmGetOpenStatus ImmReleaseContext ImmGetContext

winmm

PlaySoundW

Name

.text

Size

6.1MB

Virtual Size

6.1MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

2.4MB

Virtual Size

2.4MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

102KB

Virtual Size

151KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

187KB

Virtual Size

187KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

_RDATA

Size

512B

Virtual Size

500B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

10KB

Virtual Size

9KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

69KB

Virtual Size

68KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-11-01_8e75cb16fef8d5fe269b7fc6c44fef0e_cobalt-strike_glassworm_icedid_luca-stealer_njrat_stealc_vidar

PE Signature issue

version

winhttp

wininet

kernel32

user32

gdi32

winspool.drv

advapi32

shell32

ole32

oleaut32

msimg32

shlwapi

uxtheme

bcrypt

crypt32

secur32

ws2_32

iphlpapi

wintrust

gdiplus

oleacc

imm32

winmm

generic