Discord MultiTool[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Discord MultiTool.exe
Size

29KB
MD5

750d41e209ba6e7e6436bbc763cf6670
SHA1

54d935bbbe4075193d0e6b8a9f0b08207b8642d1
SHA256

84d86f083ebe09f0ad4f4194da55e87198365ace339921e395f1df50104660a6
SHA512

f9922cfdd2a1e54d7410c2c7c51a7ab7dfbd76ed1f8bdf61c30880f24e5bb4ed5f07c6e4b266827fa71c16905f629fcd783d4cc0c60eb3464f2e03adb4b3725e
SSDEEP

384:WesRR1lbegeZicFKXxJKvorvh4NCxEh5cyblUmrlC/cYe/YKbWQUaXFdEx7nNAVz:WttN4H5cwJCkYeAO9XwnNAhCCd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Discord MultiTool.exe

Files

Discord MultiTool.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\reape\source\repos\ew\ew\obj\Debug\ew.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ