installer_1[.]05_37[.]4[.]exe

installer_1.05_37.4.exe

IMPHASH be41bf7b8cc010b614bd36bbca606973
SHA256 34c3a5d70230d93968cc2db047398cef644fb500740bbc20d09feb8e754ae197
MD5 a2e9824e77be1fbc29913ffd0b324823
SHA1 42dd1e05ec49639d9d8ad318e732a66a1451fd6f
SHA512 d42a7f8c2d032a46dd664e6941c3496359ecc865d7a5394c782ecfd66fbd17b9bfefa1671068c869803c99cb9e00553242286c71b180341e003299d64ff4ed8c
SSDEEP 24576:eAp1czyvnORvabmyJFMwOQ75wWkGR+1FaFEddGuL9NfSvtzH:lczyvORiRJxwJ1FYxG2lzH
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

PE Signature issue

Digest

3d:a7:bd:25:d8:71:81:44:55:05:4c:8e:0f:9b:ba:fc:5d:24:ac:27:fa:9f:40:ba:33:e6:b2:7d:4c:67:c6:48

Digest Algorithm

sha256

PE Digests Matches

Not matched

Trusted

Signing Certificate

SERIALNUMBER=5128862,CN=Discord Inc.,O=Discord Inc.,L=San Francisco,ST=California,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553

Chains

Dec 16, 2024

SERIALNUMBER=5128862,CN=Discord Inc.,O=Discord Inc.,L=San Francisco,ST=California,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

SERIALNUMBER=5128862,CN=Discord Inc.,O=Discord Inc.,L=San Francisco,ST=California,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

SERIALNUMBER=5128862,CN=Discord Inc.,O=Discord Inc.,L=San Francisco,ST=California,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553

Serial Number

0d:e9:cf:2e:71:83:64:a0:06:2e:0d:83:09:3e:34:d7

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Sep 24, 2024 - Sep 24, 2027

Subject

CN=DigiCert Timestamp 2024,O=DigiCert,C=US

Serial Number

0b:ae:66:bc:5a:ba:7f:95:87:c6:f9:e9:04:e3:33:04

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Sep 26, 2024 - Nov 25, 2035

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Serial Number

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Mar 23, 2022 - Mar 22, 2037

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

0

Major OS version

5

Entry point

14467

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetFileTime CompareFileTime SearchPathW GetShortPathNameW GetFullPathNameW MoveFileW SetCurrentDirectoryW GetFileAttributesW GetLastError CreateDirectoryW SetFileAttributesW Sleep GetTickCount GetFileSize GetModuleFileNameW GetCurrentProcess CopyFileW ExitProcess GetWindowsDirectoryW GetTempPathW GetCommandLineW SetErrorMode lstrcpynA CloseHandle lstrcpynW GetDiskFreeSpaceW GlobalUnlock GlobalLock CreateThread LoadLibraryW CreateProcessW lstrcmpiA CreateFileW GetTempFileNameW lstrcatW GetProcAddress LoadLibraryA GetModuleHandleA OpenProcess lstrcpyW GetVersionExW GetSystemDirectoryW GetVersion lstrcpyA RemoveDirectoryW lstrcmpA lstrcmpiW lstrcmpW ExpandEnvironmentStringsW GlobalAlloc WaitForSingleObject GetExitCodeProcess GlobalFree GetModuleHandleW LoadLibraryExW FreeLibrary WritePrivateProfileStringW GetPrivateProfileStringW WideCharToMultiByte lstrlenA MulDiv WriteFile ReadFile MultiByteToWideChar SetFilePointer FindClose FindNextFileW FindFirstFileW DeleteFileW lstrlenW

user32

GetAsyncKeyState IsDlgButtonChecked ScreenToClient GetMessagePos CallWindowProcW IsWindowVisible LoadBitmapW CloseClipboard SetClipboardData EmptyClipboard OpenClipboard TrackPopupMenu GetWindowRect AppendMenuW CreatePopupMenu GetSystemMetrics EndDialog EnableMenuItem GetSystemMenu SetClassLongW IsWindowEnabled SetWindowPos DialogBoxParamW CheckDlgButton CreateWindowExW SystemParametersInfoW RegisterClassW SetDlgItemTextW GetDlgItemTextW MessageBoxIndirectW CharNextA CharUpperW CharPrevW wvsprintfW DispatchMessageW PeekMessageW wsprintfA DestroyWindow CreateDialogParamW SetTimer SetWindowTextW PostQuitMessage SetForegroundWindow ShowWindow wsprintfW SendMessageTimeoutW LoadCursorW SetCursor GetWindowLongW GetSysColor CharNextW GetClassInfoW ExitWindowsEx IsWindow GetDlgItem SetWindowLongW LoadImageW GetDC EnableWindow InvalidateRect SendMessageW DefWindowProcW BeginPaint GetClientRect FillRect DrawTextW EndPaint FindWindowExW

gdi32

SetBkColor GetDeviceCaps DeleteObject CreateBrushIndirect CreateFontIndirectW SetBkMode SetTextColor SelectObject

shell32

SHBrowseForFolderW SHGetPathFromIDListW SHGetFileInfoW ShellExecuteW SHFileOperationW SHGetSpecialFolderLocation

advapi32

RegEnumKeyW RegOpenKeyExW RegCloseKey RegDeleteKeyW RegDeleteValueW RegCreateKeyExW RegSetValueExW RegQueryValueExW RegEnumValueW

comctl32

ImageList_AddMasked ImageList_Destroy ord17 ImageList_Create

ole32

CoTaskMemFree OleInitialize OleUninitialize CoCreateInstance

version

GetFileVersionInfoSizeW GetFileVersionInfoW VerQueryValueW

Name

.text

Size

27KB

Virtual Size

27KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

11KB

Virtual Size

10KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

415KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.ndata

Size

Virtual Size

516KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

56KB

Virtual Size

55KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

.data

SHA256 637a3943c555de3601588a8398252a905d18c17f9d49f750b812daa630abac68
MD5 014871d9a00f0e0c8c2a7cd25606c453
SHA1 92d7e0d8d66861f702d867dac616b7d02bca94ec
SHA512 3f1e945759614a0e0ee05d8cc7c9d3a9f0b2954f64c173dd8f755d6b422c0b2f1f7a5c3af8aa54f3c6909de65c125e048dd8d17ee55da3989c4b2c807d83874c
MD5 SHA1 SHA512

.rdata

SHA256 b38b34dfbb61b5fc0659b9861f09dfdaaa743cb97bf0134e7bab66a75ddc940e
MD5 07990aaa54c3bc638bb87a87f3fb13e3
SHA1 05985b7f60a664d2595e9406ae3b208c97597bbc
SHA512 0017dd49d85c6aa9e8351c7da60f1150cb241022664151f0d2182a7a344f46286eb9f131f75a5f1adcef57a1362689a3c40a37547acc262aba92b742c13b65ad
SSDEEP 192:wiR1IorPNhxjQFOdiq343py7JRWVS7yWymPn:9RiaPblQFdq343pwrWVaymPn
MD5 SHA1 SHA512 SSDEEP

.reloc

SHA256 16e69fe1d7def9b3604042cef806f3b204a3f784dc202f389b6d383c61b6d3ea
MD5 e28dac45941a93ec616f8d1c4c70de5b
SHA1 583058763a234e64fd83e0ae55123a0146acc065
SHA512 350ea2f31cbdf535456456b2368763aa50de36a26ca174cd93231ddf2bf63380f11fd94a379a38c1a729bf6f05e2e3ae5df7e057dad3a1f2bad6d5798d95ecc7
MD5 SHA1 SHA512

.rsrc/DIALOG/105

SHA256 fecdb955f8d7f1c219ff8167f90b64f3cb52e53337494577ff73c0ac1dafcd96
MD5 3409f314895161597f3c395cc5f65525
SHA1 1a99d016d65e567f24449d9362afb6ac44006d0b
SHA512 f3e7394fa49325a7ea46728b77a5e819e18d63049d54c6adf36d08619709484f8bbd20206416d3c1440bd70632d99d9a45f3488482353f90aa21aa6ee3915427
MD5 SHA1 SHA512

.rsrc/DIALOG/106

SHA256 69897c784f1491eb3024b0d52c2897196a2e245974497fda1915db5fefcf8729
MD5 2d12c45dc2c029044aaff357141cb900
SHA1 083db861ab3c7db23c6257878296e73a89a74b8b
SHA512 a50dcf605a914f0a6f94b3f815be159c2b729d005a25d6cc9120c4d34445cae2d0b20df3dbdc7672f316010c6a47079265548a1ed5a523896963b1a3ddf98a17
MD5 SHA1 SHA512

.rsrc/DIALOG/111

SHA256 85025c8556952f6a651c2468c8a0d58853b0ba482be9ad5cd3060f216540dfc0
MD5 6be4e1387d369cf86e68eacbdd0e81dd
SHA1 351970fe2681b9b35b5d59ad052011ed96a96e17
SHA512 b81b287de73282cc5a7337559fbce5af01d1a440f04ee97c6a8e1de0c787ef38936c951b802014b841fc517fe7f2b916266dc8c35cd5de1ad0c630dc2218fa81
MD5 SHA1 SHA512

.rsrc/GROUP_ICON/103

SHA256 1db2e955eaa7931b60763d431109a1865eb066174cced3b991501866b69cfe73
MD5 3d3d6e6262d4e6f2673595bd963af822
SHA1 f5a1106e829ec3804af5cbb40f7628da85761e00
SHA512 f01c91dc6c23d98696d377425867d98d757e606bc47ccb5ca2330391962b0b78cefc75582cc89ed4ca1c6e09c1d2a5248a550ade1074afafefc9a34462d0408d
MD5 SHA1 SHA512

.rsrc/ICON/1

SHA256 3d909272afbcef484625a33577295408d2048f6f7d7fb1817519b467abaa4de7
MD5 6a23b981d54bfbadd33403cbc200f172
SHA1 216415dcac9439a268c316da9d2e9595895b43fb
SHA512 e9599d41df62ab9b77693212e6051175c4a9104dc6757c830b25181c4c3b84a6e670ce79601d01de258338be50cf3fad1c43ed7b1b0fd1c314240f3288572b5c
SSDEEP 768:xlIurSypFE/zro4zLreglHdWpwDPJ1yLpY:TIurnKro4HKglHLuy
MD5 SHA1 SHA512 SSDEEP

.rsrc/ICON/2

SHA256 05ab48563703df0e90e9300387d2d891c3f640f3672ed2c3f4dc621a1d080eb1
MD5 d0aca6a6379ac1d54cb6bcf479b1432b
SHA1 59a8f74b3616c816fba6aec6d6afa8b20de92ca2
SHA512 f7e190961e77ffca15ba7c34868831ac87eeb95d53b2d090641cc61d6fe189842d99e7e9017892bcb74df4d85ac6e08d9972e958a4d4928b068f5c93270242d6
SSDEEP 192:Ty54dk0DSppY+KdyFcyG9DIO2UBDa6hfhD1aILT07I5qDVYJyB:Ty0k0DmpnKodWD7u6hB1aILlOKa
MD5 SHA1 SHA512 SSDEEP

.rsrc/ICON/3.ico

SHA256 69cac475f387ade0cc76401c5ebfd3c25031caef2da57481fe1685e757ef392a
MD5 adb77fcda69c1e888f9a5dd90487feef
SHA1 a2454fb3b5450a4175e7c85e5e7b9af803ac689e
SHA512 bd1d1170b14b5cef11b31b664081d3a168edd3ac866becb430a1c623d398c607a372a7ba98ede304f22ec66165726877b58aa52e900661330dfcd9d79448ffbf
SSDEEP 192:IcESq5VG6PZeafMvq+jEUpKJq4YfOHjscAtcvRZ:fESjAejSqF8s44OD2ORZ
MD5 SHA1 SHA512 SSDEEP

.rsrc/ICON/4.ico

SHA256 3af2a54458a38eee2c119efca7990516fb9799715b871d19f8f1f38ccbc38dbc
MD5 bc8091df695af160e67b25f6a111c423
SHA1 8fbb6313629309bf6ac1292ce1576f51fec11463
SHA512 cfbb456a111cf7cb3a35ba71d65206bf2a85c58dec087a853161f1986a1d6d4d4c1092f652800242edae5c5af42b3f5c4a365d314c43565f74f7c8be57571cdc
SSDEEP 96:jKTkFgpO4IAiGCAdJU/I5jKrqjuOm3tvzdTmCY:OT8MpdO/Im2GdZi
MD5 SHA1 SHA512 SSDEEP

.rsrc/ICON/5.ico

SHA256 a8156aedf8ba088644b52f545acb3eeeaa30a3cb3b307d26820d2d693086826b
MD5 f150fbcc12100535d2fd91c5ed91db56
SHA1 91ac27eea4117172c7bf2be49b62f4e10fa2e67f
SHA512 a2f36e8b0735e9b86cd89106abfd882463195ce2282af7ca3d08a597ad75176a6d224cc15558f1c0736d166cb6e7ec3c8538b955ffcd8ceead38a63b670c17fe
MD5 SHA1 SHA512

.rsrc/MANIFEST/1

SHA256 2bf05590410fb6b30494a3251789f0d8a4b9da7f3e87fe89b64cace1bc0a02cd
MD5 98532ccf2df2c019bd9791a767c99973
SHA1 8a1cb5e5cf470e6b3ab544bf8009132d87d2326b
SHA512 2f3ae5393b95c33c17702d5d358c6545457112d96e2a3a8d7a2fd82bbaff6a82b29787d95b3c6f4dc69cc23373c8e129057f80b1e4ca072d3f4f1752067d664a
MD5 SHA1 SHA512

.text

SHA256 6cbf0a221c26d69af8cab6a9925b0b331082df7f79d671fafe3f4942145c76a3
MD5 00499a6f70259150109c809d6aa0e6ed
SHA1 3f4c995439cec283f1f51d71acb1f25bef740b63
SHA512 bad533ac5b9872c345212e7d70e23ab02dfa73b42882f76b45448d0a238afd1773e60ad755102a6d7b978af30acd78b0283b7f7f45c2cea9eacf869ea787a87d
SSDEEP 768:ZSuEBr5TxZ3ILakH+MQTbTf1YK5dEde6w4tKmc3K1RHpuiCYy:BErPZ3IBZcbTfu1HlrJFCP
MD5 SHA1 SHA512 SSDEEP

CERTIFICATE

SHA256 b69acee6013447e802763adcb141bd8024480b9ac9cc7b2d288bf4f5f550494b
MD5 4a39975bb66c29d5c3419a25a7714b53
SHA1 7474cf7e1e8ab2b8a722fd4b27a2a15e4f7a60c0
SHA512 0848aeb80581cd31594420185001b627ed83818b3a12afd51b6cab8c68dab1c18a71442302f448e9494ce0dd4778a424a060c490913063188e168a267ce2e4b5
SSDEEP 192:tIYiYF8fIxP3vu3FLcFoCS35IVnEy2sE9jBF0NyHZnS:tIYi0v2VwzSJIVE8E9VF0NyHA
MD5 SHA1 SHA512 SSDEEP

[0]

SHA256 8f4fff35166f08142b23bf90e5c36f72c3a730b549d172768c2fa855a338122e
MD5 f4f0c5282559707670a306c46097ffcc
SHA1 3417351819d02450b527af5b3dbba95c52f911e5
SHA512 ebda56045c88ad3b87a896e06cf3747d411a28e4270554de5ad25a28343a4b3f54008dc4458e624097ea157208e2944d67c64770346047a202e0d978adf88175
MD5 SHA1 SHA512

[1]

SHA256 09e807b27b64e86b417b39bbee57a42b7514b959b9a0c3df2381ce4535125a97
MD5 a67f5f750a835e93ca9c2f673424e1ee
SHA1 abd2c404f155c0f54cbbc6d0785e59240efa77ae
SHA512 f4b11edf09d4efb87ad0e13b206ac77d9fff8e420988c300030c1e745fcd69ec1d5d63b13ddf776ce106a53f68b9bfca374debc9cd3fddf60bf67f3272f11c3e
SSDEEP 24576:H1czyvnORvabmyJFMwOQ75wWkGR+1FaFEddGuL9NfSvtzH:VczyvORiRJxwJ1FYxG2lzH
MD5 SHA1 SHA512 SSDEEP

Sharing

General

Malware Config

Signatures

File Explorer

installer_1.05_37.4.exe

PE Signature issue

kernel32

user32

gdi32

shell32

advapi32

comctl32

ole32

version

generic

.data

.rdata

.reloc

.rsrc/DIALOG/105

.rsrc/DIALOG/106

.rsrc/DIALOG/111

.rsrc/GROUP_ICON/103

.rsrc/ICON/1

.rsrc/ICON/2

.rsrc/ICON/3.ico

.rsrc/ICON/4.ico

.rsrc/ICON/5.ico

.rsrc/MANIFEST/1

.text

CERTIFICATE

[0]

[1]