Static task
static1
Behavioral task
behavioral1
Sample
DiscordUserSniper.exe
Resource
win7-20230703-en
Behavioral task
behavioral2
Sample
DiscordUserSniper.exe
Resource
win10v2004-20230703-en
General
-
Target
DiscordUserSniper.exe
-
Size
102KB
-
MD5
e04bd0a1e3b020d7ec20e4759557c680
-
SHA1
6c97c885416bb3d1239c1558ed226e45755e901b
-
SHA256
9319451c55150f53c25b32bba8214931175f6a6e31e38dbd83232d288c079da3
-
SHA512
f5dc439f4001cc38315d1475e91d596ec59ab2dd5c322386a4292bfb9f8ed65667c0c21d75f6145ddd856a19a054e305e21958a6b17c8c8e587de085b06f9df1
-
SSDEEP
1536:D2WjO8XeEXFh5P7v88wbjNrfxCXhRoKV6+V+SoPIApp62:DZv5PDwbjNrmAE+PIAvz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource DiscordUserSniper.exe
Files
-
DiscordUserSniper.exe.exe windows x64
Password: abc
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 25KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ