DiscordRamLimiter[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

DiscordRamLimiter.exe
Size

119KB
MD5

748686f3f187745712859f8a34afa883
SHA1

d0994cc83ac3787126d2b9af79c02df29f7d0762
SHA256

36ee92c33a3e813718ccc8efe659c7043f7ff13b6ca9d66822679f01a3241f77
SHA512

9e3aa2bfab4df4c9b824a1e800dd96b9160578aac5735b404c1be63ff55ff107b8a05a2ce8261fa0df28340b05b2f5a97e9af0c764f5f639ac1db4c90f61a09d
SSDEEP

3072:ULetpPEe6JI92RtpPEe6JI92zlKQ/tpPEe6JI92r:ULe7EFR7EFzlKQ/7EF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
DiscordRamLimiter.exe

Files

DiscordRamLimiter.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\jeffr\Documents\DiscordRamLimiter\DiscordRamLimiter\obj\Debug\DiscordRamLimiter.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 90KB - Virtual size: 89KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ