Cloner[.]rar | Triage

Resubmissions

22-08-2024 11:37

240822-nrcnmaxfjp 10

Sharing

General

Target

Cloner.rar
Size

7.8MB
MD5

868f1d27dc7df68a7bbade743b53591d
SHA1

90329a5eac86f747257136c2598ec957aa52e849
SHA256

6b2fa04530c63518a58edb2b16e56e5b14d2f7a25ea0b852dd0622fc43ab3d1a
SHA512

5a57d4ec38725f3682169a0d2aed474fa468bd3f60d65482147ad9984d337fa8efe74d22cbd15840b1a1f46f7e7ec0fb246ab2ccf92cba8e23f4879d51c4c78d
SSDEEP

196608:/KWmlZ0RoP81IKwiUzdkJOdw3vdTD36qdsXnKZ5ywXzo:/sl6VSKwV3dw3v5Kv3KZFE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/DiscordCloner1.exe

Files

Cloner.rar
.rar
DiscordCloner1.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 7.8MB - Virtual size: 7.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ