DiscordRamLimiter[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

DiscordRamLimiter.exe
Size

8KB
MD5

0329eb0da5a04ec50266193251a5d770
SHA1

1cb2f6da6701c0f33119d41188ee92fe7336ff1c
SHA256

239e75eae534390f004e8290785854a7e2f77b59926e8d4621f4b6fab1068407
SHA512

a55499041c169398b30cf8212f0a6ae0c56e66d3cec20d3a8d1e34eecf4c968571d55171c7c49c02cfb736b8085064235b3dabd154da0651aa7c88195f9338fe
SSDEEP

96:myzWz8ml6ddJi1ztubhKJy/uewOf+vBqHPTfrbTBP9muxnNcCnYIzNt:1zh76ztuQ4VBQqvTf/dPlxnNcCYK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
DiscordRamLimiter.exe

Files

DiscordRamLimiter.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\faraj\Desktop\DiscordRAMReducer\DiscordRamLimiter\DiscordRamLimiter\obj\Release\DiscordRamLimiter.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ