df0821af7a8f34d86dd23a721ca3716704208451e07599316580027340cc945d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

df0821af7a8f34d86dd23a721ca3716704208451e07599316580027340cc945d
Size

229KB
MD5

447ab205bca16b4438123cb5399a8eb9
SHA1

c11cea5f48ce5d567ae080ba8a99a274dff77a36
SHA256

df0821af7a8f34d86dd23a721ca3716704208451e07599316580027340cc945d
SHA512

65179751a849884a0a3a789d87ae4d57641bf0d1bb334d1a82f550263c430ab3ce5ef0617ae74c9747e071d73aeb6d5acd47bb7a8823d404ace1da27c03157ba
SSDEEP

3072:PJKoDXaIk4skUKNYu9lNHo0dJDMFRvk3i+D2TYX+1oMiVDKQYKrBLuv/sKA8:PSITskUKNYu9lNHhJDMFAitTfiMWQsK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
df0821af7a8f34d86dd23a721ca3716704208451e07599316580027340cc945d

Files

df0821af7a8f34d86dd23a721ca3716704208451e07599316580027340cc945d
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

/home/runner/work/Discord.Net/Discord.Net/src/Discord.Net.Interactions/obj/Release/net461/Discord.Net.Interactions.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 227KB - Virtual size: 226KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ