Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
Discord.exe
-
Size
48KB
-
MD5
828f1bf21358a2799648fd8092178486
-
SHA1
6a6a71145b91d749bd7ae8a065dd9fcf41b33811
-
SHA256
6ee3ac7ad1840596203b838a47357e75c86885c1f918841f15b2ab233ab66a43
-
SHA512
0ffa1a5cceecf08a5d9ae2ed97561d0a6200d5889bbf95847b93de2642e751bbf2ad772136db829784883975a654a9d69804a71670e1a9dd9b23a1f65bda8114
-
SSDEEP
768:3u/dRTUo0HQbWUnmjSmo2qMeDXqTJqPIjjSv5H0bXn25yd4X2jQdA9d8qgrckBDN:3u/dRTUPE2kX8JjjSv5UbX2MemlCqgDJ
Malware Config
Extracted
asyncrat
0.5.8
Default
127.0.0.1:6606
127.0.0.1:7707
127.0.0.1:8808
2574jDU3cD6c
-
delay
3
-
install
false
-
install_folder
%AppData%
Signatures
Files
-
Discord.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ