discord_followbot[.]zip

General

Target

discord_followbot.zip
Size

16.2MB
MD5

0d1a8989c404f2568b03f44d3577b1e6
SHA1

8945a9076525234fc89cb87304c89aa141fed27a
SHA256

a55c718ad057b8ba75afba63f296b6803786895c6e9118a9b8cf8c9a73086ec9
SHA512

9f783bbd0e16b11dc67f58fc450484700909dff60f4a2fa7957f62cbb87972d5e5c2704cbc968571d7a8fdbe7bd27949eff578862c9656a947544457289fdc9f
SSDEEP

393216:ynVl+6qxkbOZp0iLndKWLbG0ldGl6VaOjvXKN:t71q+MWLK0GG3aN

Score

N/A

Malware Config

Signatures

Files

discord_followbot.zip
.zip

Password: fresk
discordfollowbot_v3.exe
.exe windows x86

Password: fresk

140094f13383e9ae168c4b35b6af3356

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateThread
ExitProcess
GetComputerNameA
GetModuleFileNameA
GetModuleHandleW
GetProcAddress
SetErrorMode
Sleep
VirtualAllocExNuma

shlwapi

PathFindFileNameA

msvcrt

malloc
free
memset
strcmp
_strcmpi
strcpy

Sections

.text
Size: 19.5MB - Virtual size: 19.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 508B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 67KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
module2.dll
.dll windows x86

Password: fresk

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorDllMain

Sections

.text
Size: 128KB - Virtual size: 127KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1020B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
tokens.txt.txt

Sharing

General

Malware Config

Signatures

Files

Password: fresk

Password: fresk

140094f13383e9ae168c4b35b6af3356

Headers

File Characteristics

Imports

kernel32

shlwapi

msvcrt

Sections

.text Size: 19.5MB - Virtual size: 19.5MB

.idata Size: 512B - Virtual size: 508B

.rsrc Size: 67KB - Virtual size: 66KB

Password: fresk

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 128KB - Virtual size: 127KB

.rsrc Size: 1024B - Virtual size: 1020B

.reloc Size: 512B - Virtual size: 12B

.text
Size: 19.5MB - Virtual size: 19.5MB

.idata
Size: 512B - Virtual size: 508B

.rsrc
Size: 67KB - Virtual size: 66KB

.text
Size: 128KB - Virtual size: 127KB

.rsrc
Size: 1024B - Virtual size: 1020B

.reloc
Size: 512B - Virtual size: 12B