Static task
static1
Behavioral task
behavioral1
Sample
DiscordChatExporter.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
DiscordChatExporter.exe
Resource
win10v2004-20231215-en
General
-
Target
DiscordChatExporter.exe
-
Size
116KB
-
MD5
931e7d04ffdad84c0c05aa8738b422b6
-
SHA1
10ec976c9f2b9c42972e25427497f7490ce1249a
-
SHA256
9af8371ae8d8a0142ccb8d6c8bf0172c04847cc5e0f0ab0fa766923468b10354
-
SHA512
c8e6906d0cf63adb4fe34f02a86082fdfaee034ad1a5fc8cbad8157dbfa1d095f90771ebc373634310d2c45b029908b0bdb28e06fe7df0db2352c63370976459
-
SSDEEP
1536:Su8FjAgy/opsBkbG+JrlO8zry5PcP6ehiTJ3co3fsPrTRRUb/kazFCs:Su8jRsB8Gig8zryGP6e6/IrTRu/zFP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource DiscordChatExporter.exe
Files
-
DiscordChatExporter.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 109KB - Virtual size: 109KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ