discore[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

discore.exe
Size

5.0MB
MD5

c050d8d0bc22213db9c21144f938e332
SHA1

826a2b18df9f10bbba9fab370b8ee73ed36d9be3
SHA256

af6d3904f4513bd39d46746d34cde57d4dddaf423c26eec5f6b5ec9fb3cc22e3
SHA512

3d47c194789d0229c54e8a0e2c4bb4b417a05f1605b18a750e2b9603c96e32d27922dffd71059f57c3b57fcffd38746e73e99f35ebcc36b645ee4c9063b70915
SSDEEP

49152:aT78Pw0rckc2oFACdcNGxqnU1YnHw9W7CFq2pvrHOqTk7G/lmZfQgeYjSVcHr67k:aWg2eENGgvnHwA92pvrH63QgeYjrp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
discore.exe

Files

discore.exe
.exe windows:6 windows x64 arch:x64

610ddb518aece811bce72910df6ccede

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\user\Desktop\discore\src-tauri\target\release\deps\discore.pdb

Imports

kernel32

GetUserDefaultUILanguage
CloseHandle
LCIDToLocaleName
LoadLibraryW
TryAcquireSRWLockExclusive
lstrlenW
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
ResetEvent
InitializeSListHead
RtlVirtualUnwind
IsDebuggerPresent
UnhandledExceptionFilter
GetProcAddress
SetUnhandledExceptionFilter
GetCurrentThreadId
GetTempPathW
GetSystemTimeAsFileTime
TlsSetValue
TlsGetValue
CreateThread
WriteConsoleW
MultiByteToWideChar
IsProcessorFeaturePresent
LoadLibraryA
GetFullPathNameW
ExitProcess
GetConsoleMode
CreateEventW
GetFinalPathNameByHandleW
FindFirstFileW
CreateDirectoryW
GetFileInformationByHandleEx
CreateFileW
GetFileAttributesW
GetModuleFileNameW
GetLastError
OutputDebugStringA
OutputDebugStringW
RtlUnwindEx
RtlPcToFileHeader
RaiseException
LoadLibraryExW
EncodePointer
TlsAlloc
TlsFree
FreeLibrary
GetEnvironmentVariableW
ReleaseSRWLockShared
SleepConditionVariableSRW
GetSystemInfo
GetModuleHandleW
ReleaseSRWLockExclusive
GetProcessHeap
HeapFree
CreateMutexA
WaitForSingleObjectEx
AcquireSRWLockShared
HeapReAlloc
FormatMessageW
SetEvent
WaitForSingleObject
QueryPerformanceFrequency
HeapAlloc
Sleep
GetModuleHandleA
GetFileInformationByHandle
QueryPerformanceCounter
WakeConditionVariable
WakeAllConditionVariable
ReleaseMutex
FindClose
AddVectoredExceptionHandler
SetThreadStackGuarantee
SwitchToThread
GetCurrentProcess
GetCurrentThread
RtlCaptureContext
RtlLookupFunctionEntry
SetLastError
GetCurrentDirectoryW
SetEnvironmentVariableW
AcquireSRWLockExclusive
TerminateProcess
GetCommandLineW
GetCurrentProcessId
GetStdHandle
RtlUnwind

user32

ToUnicodeEx
CreateIcon
GetKeyboardLayout
IsWindowVisible
AdjustWindowRectEx
GetMenu
SetWindowPos
GetRawInputData
InvalidateRgn
PostMessageW
DestroyWindow
VkKeyScanW
MapVirtualKeyExW
GetKeyState
GetAsyncKeyState
GetKeyboardState
RedrawWindow
SystemParametersInfoA
DestroyIcon
IsProcessDPIAware
GetDC
PostQuitMessage
AppendMenuW
CreateMenu
SetMenuItemInfoW
ShowCursor
GetCursorPos
ReleaseCapture
LoadCursorW
SetMenu
GetSystemMetrics
GetActiveWindow
ClipCursor
GetClipCursor
ClientToScreen
SetWindowLongW
RegisterTouchWindow
SendMessageW
GetForegroundWindow
GetSystemMenu
ShowWindow
GetClientRect
SetCursorPos
SetCursor
PeekMessageW
TranslateMessage
DispatchMessageW
GetWindowRect
SendInput
SetForegroundWindow
ValidateRect
PostThreadMessageW
GetWindowLongPtrW
CreateWindowExW
GetWindowTextW
GetWindowTextLengthW
SetWindowTextW
MonitorFromPoint
EnumDisplayMonitors
CreateAcceleratorTableW
CheckMenuItem
EnableMenuItem
DestroyAcceleratorTable
SetCapture
SetWindowLongPtrW
MsgWaitForMultipleObjectsEx
RegisterRawInputDevices
RegisterClassExW
RegisterWindowMessageA
GetUpdateRect
IsWindow
EnumChildWindows
GetMessageA
MonitorFromRect
DispatchMessageA
IsIconic
GetWindowPlacement
SetWindowPlacement
ChangeDisplaySettingsExW
FlashWindowEx
DefWindowProcW
TranslateAcceleratorW
GetAncestor
GetMessageW
MapVirtualKeyW
GetMonitorInfoW
SetWindowDisplayAffinity
MonitorFromWindow
CloseTouchInputHandle
ScreenToClient
GetTouchInputInfo
GetWindowLongW
TrackMouseEvent

gdi32

CreateRectRgn
DeleteObject
GetDeviceCaps

dwmapi

DwmEnableBlurBehindWindow

ole32

CoTaskMemFree
RevokeDragDrop
CoCreateInstance
CoUninitialize
OleInitialize
RegisterDragDrop
CoInitializeEx
CoTaskMemAlloc
CreateStreamOnHGlobal

comctl32

DefSubclassProc
RemoveWindowSubclass
SetWindowSubclass

shell32

SHAppBarMessage
SHGetKnownFolderPath
DragFinish
DragQueryFileW
ShellExecuteW

uxtheme

SetWindowTheme

advapi32

SystemFunction036
EventRegister
RegGetValueW
RegCloseKey
RegQueryValueExW
RegOpenKeyExW
EventSetInformation
EventWriteTransfer
EventUnregister

bcrypt

BCryptGenRandom

oleaut32

SysFreeString
GetErrorInfo
SetErrorInfo
SysStringLen

ntdll

RtlNtStatusToDosError
NtWriteFile

api-ms-win-crt-math-l1-1-0

__setusermatherr
round
trunc
floor
pow

api-ms-win-crt-string-l1-1-0

wcslen
_wcsicmp
strcpy_s
wcsncmp

api-ms-win-crt-convert-l1-1-0

wcstol
_ultow_s

api-ms-win-crt-runtime-l1-1-0

__p___argv
_c_exit
__p___argc
_initterm_e
exit
_register_thread_local_exe_atexit_callback
_exit
_initterm
_set_app_type
_get_initial_narrow_environment
_initialize_narrow_environment
_configure_narrow_argv
abort
_seh_filter_exe
_cexit
terminate
_crt_atexit
_register_onexit_function
_initialize_onexit_table

api-ms-win-crt-stdio-l1-1-0

__p__commode
_set_fmode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

malloc
free
_set_new_mode
calloc
_callnewh

Sections

.text
Size: 3.2MB - Virtual size: 3.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 159KB - Virtual size: 159KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 348B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 86KB - Virtual size: 85KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

610ddb518aece811bce72910df6ccede

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

gdi32

dwmapi

ole32

comctl32

shell32

uxtheme

advapi32

bcrypt

oleaut32

ntdll

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-heap-l1-1-0

Sections

.text Size: 3.2MB - Virtual size: 3.2MB

.rdata Size: 1.6MB - Virtual size: 1.6MB

.data Size: 1KB - Virtual size: 5KB

.pdata Size: 159KB - Virtual size: 159KB

_RDATA Size: 512B - Virtual size: 348B

.rsrc Size: 86KB - Virtual size: 85KB

.reloc Size: 27KB - Virtual size: 27KB

.text
Size: 3.2MB - Virtual size: 3.2MB

.rdata
Size: 1.6MB - Virtual size: 1.6MB

.data
Size: 1KB - Virtual size: 5KB

.pdata
Size: 159KB - Virtual size: 159KB

_RDATA
Size: 512B - Virtual size: 348B

.rsrc
Size: 86KB - Virtual size: 85KB

.reloc
Size: 27KB - Virtual size: 27KB