discord-spam-bots-master[.]zip

Sharing

Copy URL Twitter E-mail

General

Target

discord-spam-bots-master.zip
Size

17.6MB
MD5

7bfea542c5c82d7cadd1996cf53ac1d0
SHA1

8ee0319a9e7ee409566baf42e00461f38c709a23
SHA256

c06349b26f7dfdb2a2cd4600ecc5482f2a62f1d8e2d6bb096017627e01765b02
SHA512

c6196a8d2540af2c307697a14256b4afdb9d495995bf4b343172023fd0adba8b96daef6b2f59e5176cdd24d2382b00a4dd32a350d44464870552c6cd91ede449
SSDEEP

393216:rFYDfjf3OICuB6wfAA3O25IRML+jnyrILcap4qlD9fw03K3KY93:ebjf3OIr6wfAA3D5IRMLAhmqTb3/Yx

Score

3^/10

Malware Config

Signatures

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
unpack001/discord-spam-bots-master/resources/webdrivers/chromedriver.exe
unpack001/discord-spam-bots-master/resources/webdrivers/geckodriver.exe

Files

discord-spam-bots-master.zip
.zip
discord-spam-bots-master/.github/ISSUE_TEMPLATE/bug_report.md
discord-spam-bots-master/.gitignore
discord-spam-bots-master/LICENSE
discord-spam-bots-master/README.md
discord-spam-bots-master/bots/DM/discord_image_spam_dm.py
discord-spam-bots-master/bots/DM/discord_insult_spam_dm.py
discord-spam-bots-master/bots/DM/discord_text_spam_dm.py
discord-spam-bots-master/bots/misc/account-creator/account_creator.py
discord-spam-bots-master/bots/misc/account-creator/account_verify.py
discord-spam-bots-master/bots/misc/joinServer2.0.py
discord-spam-bots-master/bots/server/discord_image_spam.py
discord-spam-bots-master/bots/server/discord_insult_spam.py
discord-spam-bots-master/bots/server/discord_text_spam.py
discord-spam-bots-master/config.py
discord-spam-bots-master/requirements.txt
discord-spam-bots-master/resources/webdrivers/MicrosoftWebDriver.exe
.exe windows x86

3d01ec26cd73505a884546be5160ef21

Code Sign

33:00:00:00:bc:0b:2e:1a:7b:8a:b1:c7:91:00:00:00:00:00:bc
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

07/09/2016, 17:58

Not After

07/09/2018, 17:58

Subject

CN=Microsoft Time-Stamp Service,OU=AOC+OU=nCipher DSE ESN:12B4-2D5F-87D4,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

33:00:00:00:4b:76:63:2d:24:a2:39:9a:8b:00:01:00:00:00:4b
Certificate

Issuer

CN=Microsoft Windows Verification PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

01/03/2017, 18:46

Not After

09/05/2018, 18:46

Subject

CN=Microsoft Windows,OU=AOC,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0a:59:2b:00:00:00:00:00:3b
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

11/02/2016, 23:24

Not After

09/05/2021, 23:28

Subject

CN=Microsoft Windows Verification PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03/04/2007, 12:53

Not After

03/04/2021, 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:01:73:30:31:07:26:65:b8:b9:b3:00:00:00:00:01:73
Certificate

Issuer

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

11/08/2017, 20:23

Not After

11/08/2018, 20:23

Subject

CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:07:76:56:00:00:00:00:00:08
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

19/10/2011, 18:41

Not After

19/10/2026, 18:51

Subject

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

39:08:27:1b:c4:c2:01:17:80:8f:6a:49:c7:04:da:30:c5:49:44:f2:94:dd:cd:e3:67:88:a7:e3:fd:24:98:b2
Signer

Actual PE Digest

39:08:27:1b:c4:c2:01:17:80:8f:6a:49:c7:04:da:30:c5:49:44:f2:94:dd:cd:e3:67:88:a7:e3:fd:24:98:b2

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

26/04/2023, 11:04
Valid: false

ce:63:e2:3f:dd:c1:18:7d:ef:bd:67:40:24:bb:13:99:bf:66:27:10
Signer

Actual PE Digest

ce:63:e2:3f:dd:c1:18:7d:ef:bd:67:40:24:bb:13:99:bf:66:27:10

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Microsoft Windows,OU=AOC,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

29/09/2017, 03:51
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_initterm
_putws
__setusermatherr
_unlock
__dllonexit
_onexit
_itow_s
??1type_info@@UAE@XZ
__p__fmode
?terminate@@YAXXZ
_controlfp
??_V@YAXPAX@Z
_wcsicmp
_vsnprintf_s
??0exception@@QAE@ABV0@@Z
??0exception@@QAE@XZ
??1exception@@UAE@XZ
_purecall
memcpy_s
memmove
wprintf
_wcsnicmp
_cexit
_exit
exit
malloc
__set_app_type
free
__wgetmainargs
fflush
_amsg_exit
__p__commode
swprintf_s
wcstok_s
_wsplitpath_s
isalpha
strtol
isxdigit
isdigit
wcstod
_errno
wcscpy_s
_wtof
_finite
wcstol
__iob_func
_XcptFilter
memcpy
_CxxThrowException
?what@exception@@UBEPBDXZ
_vsnwprintf
__CxxFrameHandler3
_except_handler4_common
??0exception@@QAE@ABQBDH@Z
memset
??0exception@@QAE@ABQBD@Z
_lock
??3@YAXPAX@Z
_callnewh
_ftol2_sse

ntdll

VerSetConditionMask

httpapi

HttpCloseRequestQueue
HttpShutdownRequestQueue
HttpInitialize
HttpCreateRequestQueue
HttpCreateServerSession
HttpRemoveUrlFromUrlGroup
HttpCreateUrlGroup
HttpCloseUrlGroup
HttpSetUrlGroupProperty
HttpCloseServerSession
HttpTerminate
HttpAddUrlToUrlGroup
HttpReceiveRequestEntityBody
HttpSendHttpResponse
HttpReceiveHttpRequest

api-ms-win-core-libraryloader-l1-2-0

GetModuleHandleW
GetProcAddress
LoadStringW
LoadStringA
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleExW

api-ms-win-core-synch-l1-1-0

CreateEventW
WaitForSingleObject
InitializeCriticalSectionAndSpinCount
WaitForSingleObjectEx
DeleteCriticalSection
OpenEventW
ReleaseSemaphore
SetEvent
CreateSemaphoreExW
OpenSemaphoreW
CreateMutexExW
ReleaseMutex

api-ms-win-core-heap-l1-1-0

GetProcessHeap
HeapAlloc
HeapFree

api-ms-win-core-errorhandling-l1-1-0

GetLastError
SetLastError
UnhandledExceptionFilter
SetUnhandledExceptionFilter

api-ms-win-core-processthreads-l1-1-0

GetCurrentThreadId
GetCurrentProcess
CreateProcessAsUserW
TerminateProcess
ResumeThread
OpenProcessToken
CreateThread
GetCurrentProcessId

api-ms-win-core-localization-l1-2-0

LCMapStringEx
FormatMessageW
FormatMessageA

api-ms-win-core-debug-l1-1-0

IsDebuggerPresent
OutputDebugStringW
DebugBreak

api-ms-win-core-handle-l1-1-0

DuplicateHandle
CloseHandle

oleaut32

BSTR_UserUnmarshal
SysStringLen
BSTR_UserFree
BSTR_UserSize
SysFreeString
SysAllocString
BSTR_UserMarshal

rpcrt4

NdrOleFree
IUnknown_Release_Proxy
CStdStubBuffer_DebugServerQueryInterface
IUnknown_AddRef_Proxy
UuidCreate
CStdStubBuffer_Invoke
UuidToStringW
RpcStringFreeW
CStdStubBuffer_AddRef
NdrDllGetClassObject
CStdStubBuffer_CountRefs
CStdStubBuffer_QueryInterface
NdrOleAllocate
NdrCStdStubBuffer_Release
CStdStubBuffer_DebugServerRelease
CStdStubBuffer_Connect
CStdStubBuffer_IsIIDSupported
IUnknown_QueryInterface_Proxy
CStdStubBuffer_Disconnect

api-ms-win-core-com-midlproxystub-l1-1-0

ObjectStublessClient3

api-ms-win-core-com-l1-1-0

CoRegisterClassObject
CoRegisterPSClsid
CoRevokeClassObject
CreateStreamOnHGlobal
CoMarshalInterface
GetHGlobalFromStream
CoReleaseMarshalData
CoCreateInstance
CoTaskMemAlloc
CoTaskMemFree
CoTaskMemRealloc
CoInitializeEx
CoUninitialize
CoCreateGuid
CoGetInterfaceAndReleaseStream
CLSIDFromString

api-ms-win-core-synch-l1-2-0

Sleep
InitOnceExecuteOnce

api-ms-win-core-processthreads-l1-1-1

IsProcessorFeaturePresent
OpenProcess

api-ms-win-core-synch-l1-2-1

WaitForMultipleObjects

api-ms-win-core-file-l1-1-0

CreateFileW
CreateDirectoryW
WriteFile
GetFileAttributesW
ReadFile

api-ms-win-security-sddl-l1-1-0

ConvertSidToStringSidW
ConvertStringSecurityDescriptorToSecurityDescriptorW

api-ms-win-core-heap-l2-1-0

LocalAlloc
LocalFree

api-ms-win-core-namespace-l1-1-0

CreateBoundaryDescriptorW
CreatePrivateNamespaceW
ClosePrivateNamespace
DeleteBoundaryDescriptor

api-ms-win-security-base-l1-1-0

GetAce
EqualSid
AllocateAndInitializeSid
IsValidSid
GetAclInformation
AddAce
FreeSid
InitializeAcl
GetLengthSid
AddAccessAllowedAce
SetTokenInformation
CreateRestrictedToken
CheckTokenMembership
GetTokenInformation
CreateWellKnownSid
DuplicateTokenEx

api-ms-win-core-winrt-string-l1-1-0

WindowsCreateString
WindowsDeleteString

api-ms-win-core-string-l1-1-0

WideCharToMultiByte
MultiByteToWideChar

api-ms-win-core-errorhandling-l1-1-2

RaiseFailFastException

api-ms-win-core-sysinfo-l1-1-0

GetLocalTime
GetSystemTimeAsFileTime
GetTickCount
GetSystemInfo

api-ms-win-core-version-l1-1-1

GetFileVersionInfoSizeW
GetFileVersionInfoW

api-ms-win-core-version-l1-1-0

VerQueryValueW

api-ms-win-eventing-provider-l1-1-0

EventSetInformation
EventRegister
EventUnregister
EventWriteEx

api-ms-win-core-file-l2-1-2

CopyFileW

api-ms-win-core-path-l1-1-0

PathCchCombine

api-ms-win-core-namedpipe-l1-1-0

CreateNamedPipeW

api-ms-win-core-psapi-l1-1-0

K32EnumProcesses
K32GetProcessImageFileNameW

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter

api-ms-win-shlwapi-ie-l1-1-0

PathIsDirectoryW

api-ms-win-shell-shellfolders-l1-1-0

SHGetKnownFolderPath

api-ms-win-core-job-l2-1-0

SetInformationJobObject
CreateJobObjectW
AssignProcessToJobObject

api-ms-win-core-kernel32-legacy-l1-1-0

RegisterWaitForSingleObject

api-ms-win-core-threadpool-legacy-l1-1-0

UnregisterWaitEx

api-ms-win-core-shlwapi-legacy-l1-1-0

PathFileExistsW
PathFindFileNameW

api-ms-win-core-kernel32-legacy-l1-1-1

VerifyVersionInfoW

api-ms-win-core-shlwapi-obsolete-l1-1-0

QISearch
StrCmpCW

api-ms-win-core-heap-obsolete-l1-1-0

GlobalLock
GlobalSize
GlobalUnlock

api-ms-win-rtcore-ntuser-window-l1-1-0

KillTimer
GetWindowLongW
GetClassNameW
SetWindowPos
GetClientRect
SetTimer
GetAncestor
DispatchMessageW
PostThreadMessageW
GetWindowRect
PeekMessageW
GetMessageW
SendMessageW
TranslateMessage

api-ms-win-rtcore-ntuser-synch-l1-1-0

MsgWaitForMultipleObjectsEx

api-ms-win-shcore-stream-l1-1-0

SHCreateMemStream

api-ms-win-shcore-scaling-l1-1-1

GetScaleFactorForMonitor

iertutil

ord794
ord301
ord795
ord791
ord793
ord140
ord792
ord799
ord650
ord797
ord870

api-ms-win-core-delayload-l1-1-1

ResolveDelayLoadedAPI

api-ms-win-core-delayload-l1-1-0

DelayLoadFailureHook

Sections

.text
Size: 97KB - Virtual size: 96KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.didat
Size: 512B - Virtual size: 116B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
discord-spam-bots-master/resources/webdrivers/chromedriver-linux
.elf .js linux x64
discord-spam-bots-master/resources/webdrivers/chromedriver-mac
.macho macos
discord-spam-bots-master/resources/webdrivers/chromedriver.exe
.exe windows x86

36adbc32824f9faa3d8dc282ff9f1a51

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

CreateProcessAsUserW
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
SystemFunction036
EventRegister
EventUnregister
EventWrite
RegNotifyChangeKeyValue
RegCreateKeyExW
RegOpenKeyExW
RegCloseKey
RegQueryValueExW
RegOpenKeyExA
RegQueryValueExA

dbghelp

SymSetSearchPathW
SymSetOptions
SymInitialize
SymGetSearchPathW
SymFromAddr
SymGetLineFromAddr64

kernel32

GetCurrentThread
Sleep
IsDebuggerPresent
RaiseException
CreateThread
GetThreadId
WaitForSingleObject
SetThreadPriority
GetThreadPriority
GetCurrentProcess
DuplicateHandle
GetFileAttributesW
SetFileAttributesW
RemoveDirectoryW
MoveFileExW
MoveFileW
ReplaceFileW
CreateDirectoryW
GetTempPathW
GetLongPathNameW
CreateFileMappingW
MapViewOfFile
UnmapViewOfFile
GetFileAttributesExW
ReadFile
SetHandleInformation
CreateProcessW
AssignProcessToJobObject
ResumeThread
GetProcessId
GetStdHandle
TerminateProcess
GetExitCodeProcess
GetSystemTimeAsFileTime
TzSpecificLocalTimeToSystemTime
SystemTimeToFileTime
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
QueryPerformanceFrequency
QueryPerformanceCounter
QueryThreadCycleTime
HeapCreate
HeapDestroy
GlobalMemoryStatusEx
GetDiskFreeSpaceExW
FindClose
FindNextFileW
FindFirstFileExW
CreateEventW
ResetEvent
SetEvent
TryAcquireSRWLockExclusive
GetTickCount
InitializeConditionVariable
SleepConditionVariableSRW
WakeAllConditionVariable
WakeConditionVariable
VirtualQuery
SetFilePointerEx
GetFileSizeEx
SetEndOfFile
SetFileTime
GetFileInformationByHandle
FlushFileBuffers
SetUnhandledExceptionFilter
RtlCaptureStackBackTrace
CreateIoCompletionPort
GetLocalTime
GetQueuedCompletionStatus
TlsAlloc
TlsFree
TlsSetValue
GetModuleHandleExW
GetVersionExW
GetNativeSystemInfo
GetProcAddress
HeapFree
HeapReAlloc
HeapSize
GetProcessTimes
GetSystemDirectoryW
GetWindowsDirectoryW
ExpandEnvironmentStringsW
SetEnvironmentVariableW
GetEnvironmentVariableW
UnregisterWaitEx
RegisterWaitForSingleObject
LoadLibraryW
LoadLibraryExW
FormatMessageW
GlobalFree
SetFilePointer
CancelIo
InitOnceExecuteOnce
InitializeSRWLock
AcquireSRWLockShared
ReleaseSRWLockShared
InitializeCriticalSectionAndSpinCount
ResolveLocaleName
GetTimeZoneInformation
GetDateFormatEx
GetTimeFormatEx
GetLocaleInfoEx
GetCurrencyFormatEx
GetNumberFormatEx
GetUserDefaultLocaleName
GetUserGeoID
GetGeoInfoW
CreateFileA
WideCharToMultiByte
MultiByteToWideChar
FreeLibrary
GetACP
RtlUnwind
InterlockedPushEntrySList
GetCPInfo
GetLocaleInfoW
LCMapStringW
CompareStringW
DecodePointer
EncodePointer
GetStringTypeW
GetStartupInfoW
IsProcessorFeaturePresent
UnhandledExceptionFilter
InitializeSListHead
WaitForSingleObjectEx
GetCurrentProcessId
GetModuleFileNameW
GetCurrentDirectoryW
CreateFileW
SetLastError
WriteFile
OutputDebugStringA
GetLastError
DeleteFileW
GetModuleFileNameA
GetCommandLineA
IsValidLocale
GetUserDefaultLCID
GetCurrentThreadId
GetModuleHandleW
TlsGetValue
HeapAlloc
CloseHandle
LocalFree
GetCommandLineW
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
ExitProcess
ReleaseSRWLockExclusive
VerifyVersionInfoW
VerSetConditionMask
FormatMessageA
PostQueuedCompletionStatus
GetConsoleCP
GetConsoleMode
GetFullPathNameW
SetStdHandle
GetFileType
ReadConsoleW
GetDriveTypeW
AcquireSRWLockExclusive
EnumSystemLocalesW
IsValidCodePage
GetOEMCP
FindFirstFileExA
FindNextFileA
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetThreadTimes
WriteConsoleW
SetEnvironmentVariableA

ole32

CoInitializeEx
CoCreateInstance
PropVariantClear
CoUninitialize
CoTaskMemFree

shell32

CommandLineToArgvW
SHGetFolderPathW
SHGetKnownFolderPath

shlwapi

PathMatchSpecW

user32

SetWindowLongW
GetWindowLongW
CreateWindowExW
DestroyWindow
RegisterClassExW
DispatchMessageW
TranslateMessage
UnregisterClassW
DefWindowProcW
MsgWaitForMultipleObjectsEx
GetQueueStatus
PeekMessageW
PostMessageW
KillTimer
LoadKeyboardLayoutW
GetKeyboardLayoutNameW
ActivateKeyboardLayout
GetKeyboardLayoutList
VkKeyScanW
ToUnicode
MapVirtualKeyW
SetTimer
PostQuitMessage

winmm

timeEndPeriod
timeGetTime
timeBeginPeriod

ws2_32

WSASocketW
WSAStartup
WSAIoctl
setsockopt
WSASendTo
WSASend
recv
connect
accept
WSAEventSelect
listen
getpeername
getsockopt
bind
WSACloseEvent
closesocket
shutdown
WSAResetEvent
WSAGetOverlappedResult
WSAGetLastError
WSAEnumNetworkEvents
WSACreateEvent
ioctlsocket
freeaddrinfo
getaddrinfo
WSARecvFrom
sendto
recvfrom
socket
getsockname

userenv

CreateEnvironmentBlock
DestroyEnvironmentBlock

crypt32

CertSetCertificateContextProperty
CertGetCertificateChain
CertFreeCertificateChain
CertVerifyCertificateChainPolicy
CertFreeCertificateChainEngine
CertFreeCertificateContext
CryptInstallOIDFunctionAddress
CryptVerifyCertificateSignatureEx
CertCompareCertificateName
CertGetIssuerCertificateFromStore
CryptDecodeObjectEx
CertOpenStore
CertAddEncodedCertificateToStore
CertCloseStore
CertCreateCertificateChainEngine
CertGetCertificateContextProperty
CertDuplicateCertificateContext
CertFindExtension

secur32

DeleteSecurityContext
FreeContextBuffer
FreeCredentialsHandle
QuerySecurityPackageInfoW
InitializeSecurityContextW
AcquireCredentialsHandleW

urlmon

CoInternetCreateSecurityManager

winhttp

WinHttpSetTimeouts
WinHttpOpen
WinHttpCloseHandle
WinHttpGetIEProxyConfigForCurrentUser
WinHttpGetProxyForUrl

Exports

Exports

GetHandleVerifier

Sections

.text
Size: 3.8MB - Virtual size: 3.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

_text32
Size: 66KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2.0MB - Virtual size: 2.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 51KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 141KB - Virtual size: 141KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
discord-spam-bots-master/resources/webdrivers/geckodriver-linux
.elf linux x64
discord-spam-bots-master/resources/webdrivers/geckodriver-mac
.macho macos
discord-spam-bots-master/resources/webdrivers/geckodriver.exe
.exe windows x64

7302d74dd881bfe2f96184ca014a0bd0

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

dbghelp

StackWalk64
SymFromAddrW
SymFunctionTableAccess64
SymGetLineFromAddrW64
SymGetModuleBase64
SymInitializeW

ktmw32

CommitTransaction
CreateTransaction
RollbackTransaction

advapi32

CryptAcquireContextA
CryptGenRandom
CryptReleaseContext
OpenProcessToken
RegCloseKey
RegEnumKeyExW
RegEnumValueW
RegOpenKeyExW
RegOpenKeyTransactedW
RegQueryInfoKeyW
RegQueryValueExW
RegSetValueExW
SystemFunction036

kernel32

AddVectoredExceptionHandler
CancelIo
CloseHandle
CopyFileExW
CreateDirectoryW
CreateEventW
CreateFileW
CreateHardLinkW
CreateNamedPipeW
CreateProcessW
CreateThread
DeleteCriticalSection
DeleteFileW
DeviceIoControl
DosDateTimeToFileTime
DuplicateHandle
EnterCriticalSection
ExitProcess
FileTimeToDosDateTime
FileTimeToSystemTime
FindClose
FindFirstFileW
FindNextFileW
FlushFileBuffers
FormatMessageW
FreeEnvironmentStringsW
FreeLibrary
GetCommandLineW
GetConsoleMode
GetConsoleScreenBufferInfo
GetCurrentDirectoryW
GetCurrentProcess
GetCurrentProcessId
GetCurrentThread
GetCurrentThreadId
GetEnvironmentStringsW
GetEnvironmentVariableW
GetExitCodeProcess
GetFileInformationByHandle
GetFileInformationByHandleEx
GetLastError
GetModuleFileNameW
GetModuleHandleW
GetOverlappedResult
GetProcAddress
GetProcessHeap
GetProcessId
GetStartupInfoA
GetStdHandle
GetSystemInfo
GetSystemTimeAsFileTime
GetTempPathW
GetTickCount
GetTimeZoneInformation
HeapAlloc
HeapFree
HeapReAlloc
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryW
LocalFree
MoveFileExW
OpenProcess
QueryPerformanceCounter
QueryPerformanceFrequency
RaiseException
ReadConsoleW
ReadFile
RemoveDirectoryW
RtlAddFunctionTable
RtlCaptureContext
RtlLookupFunctionEntry
RtlUnwindEx
RtlVirtualUnwind
SetCurrentDirectoryW
SetEnvironmentVariableW
SetFileAttributesW
SetFilePointerEx
SetHandleInformation
SetLastError
SetUnhandledExceptionFilter
Sleep
SwitchToThread
SystemTimeToFileTime
SystemTimeToTzSpecificLocalTime
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TryEnterCriticalSection
TzSpecificLocalTimeToSystemTime
UnhandledExceptionFilter
VirtualProtect
VirtualQuery
WaitForMultipleObjects
WaitForSingleObject
WideCharToMultiByte
WriteConsoleW
WriteFile
__C_specific_handler

msvcrt

__dllonexit
__doserrno
__getmainargs
__initenv
__iob_func
__lconv_init
__pioinfo
__set_app_type
__setusermatherr
_acmdln
_amsg_exit
_cexit
_errno
_exit
_filelengthi64
_fileno
_fmode
_initterm
_localtime64
_lock
_lseeki64
_mktime64
_onexit
_stat64
_time64
_unlock
_utime64
_vsnprintf
_write
abort
atoi
bsearch
calloc
exit
fclose
fflush
fgetpos
fopen_s
fprintf
fread
free
freopen_s
fsetpos
fwprintf
fwrite
malloc
memcmp
memcpy
memmove
memset
raise
realloc
remove
signal
strcmp
strlen
strncmp
vfprintf
wcscpy
_snwprintf
_read
_open
_lseek
_close

shell32

CommandLineToArgvW

user32

MessageBoxW

userenv

GetUserProfileDirectoryW

ws2_32

WSACleanup
WSADuplicateSocketW
WSAGetLastError
WSASocketW
WSAStartup
accept
bind
closesocket
connect
freeaddrinfo
getaddrinfo
getpeername
getsockname
getsockopt
ioctlsocket
listen
recv
recvfrom
select
send
sendto
setsockopt
shutdown

Sections

.text
Size: 3.0MB - Virtual size: 3.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 719KB - Virtual size: 719KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 64KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 388KB - Virtual size: 387KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 112B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 104B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

/4
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/19
Size: 42KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/31
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/45
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/57
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/70
Size: 512B - Virtual size: 248B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/81
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/92
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
discord-spam-bots-master/start.py

Sharing

General

Malware Config

Signatures

Files

3d01ec26cd73505a884546be5160ef21

Code Sign

33:00:00:00:bc:0b:2e:1a:7b:8a:b1:c7:91:00:00:00:00:00:bcCertificate

Extended Key Usages

33:00:00:00:4b:76:63:2d:24:a2:39:9a:8b:00:01:00:00:00:4bCertificate

Extended Key Usages

61:0a:59:2b:00:00:00:00:00:3bCertificate

Key Usages

61:16:68:34:00:00:00:00:00:1cCertificate

Extended Key Usages

Key Usages

33:00:00:01:73:30:31:07:26:65:b8:b9:b3:00:00:00:00:01:73Certificate

Extended Key Usages

61:07:76:56:00:00:00:00:00:08Certificate

Key Usages

39:08:27:1b:c4:c2:01:17:80:8f:6a:49:c7:04:da:30:c5:49:44:f2:94:dd:cd:e3:67:88:a7:e3:fd:24:98:b2Signer

Signature Validations

Verification

26/04/2023, 11:04 Valid: false

ce:63:e2:3f:dd:c1:18:7d:ef:bd:67:40:24:bb:13:99:bf:66:27:10Signer

Signature Validations

Verification

29/09/2017, 03:51 Valid: false

Headers

DLL Characteristics

File Characteristics

Imports

msvcrt

ntdll

httpapi

api-ms-win-core-libraryloader-l1-2-0

api-ms-win-core-synch-l1-1-0

api-ms-win-core-heap-l1-1-0

api-ms-win-core-errorhandling-l1-1-0

api-ms-win-core-processthreads-l1-1-0

api-ms-win-core-localization-l1-2-0

api-ms-win-core-debug-l1-1-0

api-ms-win-core-handle-l1-1-0

oleaut32

rpcrt4

api-ms-win-core-com-midlproxystub-l1-1-0

api-ms-win-core-com-l1-1-0

api-ms-win-core-synch-l1-2-0

api-ms-win-core-processthreads-l1-1-1

api-ms-win-core-synch-l1-2-1

api-ms-win-core-file-l1-1-0

api-ms-win-security-sddl-l1-1-0

api-ms-win-core-heap-l2-1-0

api-ms-win-core-namespace-l1-1-0

api-ms-win-security-base-l1-1-0

api-ms-win-core-winrt-string-l1-1-0

api-ms-win-core-string-l1-1-0

api-ms-win-core-errorhandling-l1-1-2

api-ms-win-core-sysinfo-l1-1-0

api-ms-win-core-version-l1-1-1

api-ms-win-core-version-l1-1-0

api-ms-win-eventing-provider-l1-1-0

api-ms-win-core-file-l2-1-2

api-ms-win-core-path-l1-1-0

api-ms-win-core-namedpipe-l1-1-0

api-ms-win-core-psapi-l1-1-0

api-ms-win-core-profile-l1-1-0

api-ms-win-shlwapi-ie-l1-1-0

api-ms-win-shell-shellfolders-l1-1-0

api-ms-win-core-job-l2-1-0

api-ms-win-core-kernel32-legacy-l1-1-0

api-ms-win-core-threadpool-legacy-l1-1-0

api-ms-win-core-shlwapi-legacy-l1-1-0

api-ms-win-core-kernel32-legacy-l1-1-1

api-ms-win-core-shlwapi-obsolete-l1-1-0

api-ms-win-core-heap-obsolete-l1-1-0

api-ms-win-rtcore-ntuser-window-l1-1-0

api-ms-win-rtcore-ntuser-synch-l1-1-0

api-ms-win-shcore-stream-l1-1-0

api-ms-win-shcore-scaling-l1-1-1

33:00:00:00:bc:0b:2e:1a:7b:8a:b1:c7:91:00:00:00:00:00:bc
Certificate

33:00:00:00:4b:76:63:2d:24:a2:39:9a:8b:00:01:00:00:00:4b
Certificate

61:0a:59:2b:00:00:00:00:00:3b
Certificate

61:16:68:34:00:00:00:00:00:1c
Certificate

33:00:00:01:73:30:31:07:26:65:b8:b9:b3:00:00:00:00:01:73
Certificate

61:07:76:56:00:00:00:00:00:08
Certificate

39:08:27:1b:c4:c2:01:17:80:8f:6a:49:c7:04:da:30:c5:49:44:f2:94:dd:cd:e3:67:88:a7:e3:fd:24:98:b2
Signer

26/04/2023, 11:04
Valid: false

ce:63:e2:3f:dd:c1:18:7d:ef:bd:67:40:24:bb:13:99:bf:66:27:10
Signer

29/09/2017, 03:51
Valid: false

.text
Size: 97KB - Virtual size: 96KB

.data
Size: 2KB - Virtual size: 2KB

.idata
Size: 10KB - Virtual size: 9KB

.didat
Size: 512B - Virtual size: 116B

.rsrc
Size: 8KB - Virtual size: 8KB

.reloc
Size: 5KB - Virtual size: 4KB

.text
Size: 3.8MB - Virtual size: 3.8MB

_text32
Size: 66KB - Virtual size: 66KB

.rdata
Size: 2.0MB - Virtual size: 2.0MB

.data
Size: 20KB - Virtual size: 38KB

.rsrc
Size: 51KB - Virtual size: 50KB

.reloc
Size: 141KB - Virtual size: 141KB

.text
Size: 3.0MB - Virtual size: 3.0MB

.data
Size: 4KB - Virtual size: 3KB

.rdata
Size: 719KB - Virtual size: 719KB

.pdata
Size: 64KB - Virtual size: 64KB

.xdata
Size: 388KB - Virtual size: 387KB

.bss
Size: - Virtual size: 2KB

.idata
Size: 8KB - Virtual size: 8KB

.CRT
Size: 512B - Virtual size: 112B

.tls
Size: 512B - Virtual size: 104B

/4
Size: 1KB - Virtual size: 1KB

/19
Size: 42KB - Virtual size: 42KB

/31
Size: 7KB - Virtual size: 6KB

/45
Size: 6KB - Virtual size: 5KB

/57
Size: 3KB - Virtual size: 3KB

/70
Size: 512B - Virtual size: 248B

/81
Size: 14KB - Virtual size: 13KB

/92
Size: 1KB - Virtual size: 1KB