Unconfirmed 185547[.]crdownload

Sharing

Copy URL Twitter E-mail

General

Target

Unconfirmed 185547.crdownload
Size

423KB
MD5

8e5142d5eab85443c34e3e3b2b1bffaa
SHA1

93ea419df03826417ff02808149355b8bcd7dffc
SHA256

2490cc09174b2ff491f8c94be8d853be989b2250f1be87254444b1498cfd589c
SHA512

ab289f2a7d4d10151312023f3a7edbb8389ff09039180414a8b62148fe0e6ad4cc7a82d1970579503b813294cfa67f8e3e51719b6c1d2b91ce4d1858ed8953b3
SSDEEP

12288:AZMNrbHjPT7ZvoFvZ4B1kVdEHsW7sMHxqVLILw+m:AZMFrTtv8vZ4LkViMWwaEkwb

Score

3^/10

Malware Config

Signatures

Unsigned PE 3 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Stolen Nitro Discord Code Generator/_Stolen Nitro Code Generator.exe
unpack001/Stolen Nitro Discord Code Generator/library/Ionic.Zip.dll
unpack001/Stolen Nitro Discord Code Generator/library/Launcher.exe

Files

Unconfirmed 185547.crdownload
.zip

Password: KephyxNitro2024
Stolen Nitro Discord Code Generator/Virus Total/desktop.ini
Stolen Nitro Discord Code Generator/Virus Total/scan.txt
Stolen Nitro Discord Code Generator/_Output.txt
Stolen Nitro Discord Code Generator/_Stolen Nitro Code Generator.exe
.exe windows:4 windows x86 arch:x86

Password: KephyxNitro2024

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\thorson\Desktop\Launcher1\Launcher\Launcher\obj\Debug\LUNCHER CRACKING.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 187KB - Virtual size: 187KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Stolen Nitro Discord Code Generator/_Stolen Nitro Code Generator_1.0.0.0.ilmap
Stolen Nitro Discord Code Generator/library/Ionic.Zip.dll
.dll windows:4 windows x86 arch:x86

Password: KephyxNitro2024

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\DotNetZip\Zip\obj\Debug\Ionic.Zip.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 478KB - Virtual size: 477KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Stolen Nitro Discord Code Generator/library/LICENCE.dat
.zip
Stolen Nitro Discord Code Generator/library/Launcher.exe
.exe windows:4 windows x86 arch:x86

Password: KephyxNitro2024

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Stolen Nitro Discord Code Generator/library/_Output.txt
Stolen Nitro Discord Code Generator/library/_Stolen Nitro Code Generator_1.0.0.0.ilmap
Stolen Nitro Discord Code Generator/library/ncdll.exe

Sharing

General

Malware Config

Signatures

Files

Password: KephyxNitro2024

Password: KephyxNitro2024

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

mscoree

Sections

.text Size: 11KB - Virtual size: 10KB

.rsrc Size: 187KB - Virtual size: 187KB

.reloc Size: 512B - Virtual size: 12B

Password: KephyxNitro2024

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

mscoree

Sections

.text Size: 478KB - Virtual size: 477KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 512B - Virtual size: 12B

Password: KephyxNitro2024

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 50KB - Virtual size: 50KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 512B - Virtual size: 12B

.text
Size: 11KB - Virtual size: 10KB

.rsrc
Size: 187KB - Virtual size: 187KB

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 478KB - Virtual size: 477KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 50KB - Virtual size: 50KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 12B