Static task
static1
Behavioral task
behavioral1
Sample
DiscordChecker.exe
Resource
win10v2004-20230220-en
General
-
Target
DiscordChecker.exe
-
Size
199KB
-
MD5
2636325f4e80bd2e2e841a91ac47b514
-
SHA1
d1c45f3f82aad5dc6b588d5e4ce33ad5aa6f5a8d
-
SHA256
2a9987f4b98d1c1e9351124fe5b8ecd2eea8e42af0b9e30097ac5ba34c68c2e5
-
SHA512
84b6c6e8c4f7b37752b4582cec92fe2c7b3c3da7b93d73a1e0e85fe189200bf17b4e76025e9fe5b6954de03ebae5f1150eca3e90ef549527bcf8a88075c46621
-
SSDEEP
1536:x4lbePKJ1SqGFH7Oz6/vjl3Jj2IfR39WXd:x4lb6q+ae/vjH3JA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource DiscordChecker.exe
Files
-
DiscordChecker.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 187KB - Virtual size: 187KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ