3fc7b5021022dc6465073c7e2b90d888[.]exe

3fc7b5021022dc6465073c7e2b90d888.exe

IMPHASH be41bf7b8cc010b614bd36bbca606973
SHA256 e36a4502ab814a284a91fe9497689ec2eb0eeb70aae50502fa45b178b1ad034d
MD5 3fc7b5021022dc6465073c7e2b90d888
SHA1 424924dcae8f5dec64961712f848a6f98d34dea5
SHA512 9f1ef74c88e5d22ace52bdb880e958b7b7d4e06c26ab9b79954b7020270b8c90b594ea9479abf5abe6c6bdbada679cfb34e2877143b66c65257cb9fb498c7581
SSDEEP 24576:HiJWcdxMCkM3syvXCvtM6dM0fD/RLJziEpuJFvf+ZjC4B9Iw:QWcdxMC38+SvtM6dvV1zBpufvGC4B9Iw
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

PE Signature issue

Digest

b0:cd:1d:9e:1d:ac:f9:0c:63:41:42:f7:db:6b:38:2f:8d:e4:85:03:81:91:a7:50:e4:3e:7b:04:b2:55:83:b4

Digest Algorithm

sha256

PE Digests Matches

Not matched

Trusted

Signing Certificate

SERIALNUMBER=5128862,CN=Discord Inc.,O=Discord Inc.,L=San Francisco,ST=California,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553

Chains

Dec 16, 2024

SERIALNUMBER=5128862,CN=Discord Inc.,O=Discord Inc.,L=San Francisco,ST=California,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

SERIALNUMBER=5128862,CN=Discord Inc.,O=Discord Inc.,L=San Francisco,ST=California,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

SERIALNUMBER=5128862,CN=Discord Inc.,O=Discord Inc.,L=San Francisco,ST=California,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553

Serial Number

0d:e9:cf:2e:71:83:64:a0:06:2e:0d:83:09:3e:34:d7

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Sep 24, 2024 - Sep 24, 2027

Subject

CN=DigiCert Timestamp 2024,O=DigiCert,C=US

Serial Number

0b:ae:66:bc:5a:ba:7f:95:87:c6:f9:e9:04:e3:33:04

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Sep 26, 2024 - Nov 25, 2035

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Serial Number

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Mar 23, 2022 - Mar 22, 2037

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

0

Major OS version

5

Entry point

14467

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetFileTime CompareFileTime SearchPathW GetShortPathNameW GetFullPathNameW MoveFileW SetCurrentDirectoryW GetFileAttributesW GetLastError CreateDirectoryW SetFileAttributesW Sleep GetTickCount GetFileSize GetModuleFileNameW GetCurrentProcess CopyFileW ExitProcess GetWindowsDirectoryW GetTempPathW GetCommandLineW SetErrorMode lstrcpynA CloseHandle lstrcpynW GetDiskFreeSpaceW GlobalUnlock GlobalLock CreateThread LoadLibraryW CreateProcessW lstrcmpiA CreateFileW GetTempFileNameW lstrcatW GetProcAddress LoadLibraryA GetModuleHandleA OpenProcess lstrcpyW GetVersionExW GetSystemDirectoryW GetVersion lstrcpyA RemoveDirectoryW lstrcmpA lstrcmpiW lstrcmpW ExpandEnvironmentStringsW GlobalAlloc WaitForSingleObject GetExitCodeProcess GlobalFree GetModuleHandleW LoadLibraryExW FreeLibrary WritePrivateProfileStringW GetPrivateProfileStringW WideCharToMultiByte lstrlenA MulDiv WriteFile ReadFile MultiByteToWideChar SetFilePointer FindClose FindNextFileW FindFirstFileW DeleteFileW lstrlenW

user32

GetAsyncKeyState IsDlgButtonChecked ScreenToClient GetMessagePos CallWindowProcW IsWindowVisible LoadBitmapW CloseClipboard SetClipboardData EmptyClipboard OpenClipboard TrackPopupMenu GetWindowRect AppendMenuW CreatePopupMenu GetSystemMetrics EndDialog EnableMenuItem GetSystemMenu SetClassLongW IsWindowEnabled SetWindowPos DialogBoxParamW CheckDlgButton CreateWindowExW SystemParametersInfoW RegisterClassW SetDlgItemTextW GetDlgItemTextW MessageBoxIndirectW CharNextA CharUpperW CharPrevW wvsprintfW DispatchMessageW PeekMessageW wsprintfA DestroyWindow CreateDialogParamW SetTimer SetWindowTextW PostQuitMessage SetForegroundWindow ShowWindow wsprintfW SendMessageTimeoutW LoadCursorW SetCursor GetWindowLongW GetSysColor CharNextW GetClassInfoW ExitWindowsEx IsWindow GetDlgItem SetWindowLongW LoadImageW GetDC EnableWindow InvalidateRect SendMessageW DefWindowProcW BeginPaint GetClientRect FillRect DrawTextW EndPaint FindWindowExW

gdi32

SetBkColor GetDeviceCaps DeleteObject CreateBrushIndirect CreateFontIndirectW SetBkMode SetTextColor SelectObject

shell32

SHBrowseForFolderW SHGetPathFromIDListW SHGetFileInfoW ShellExecuteW SHFileOperationW SHGetSpecialFolderLocation

advapi32

RegEnumKeyW RegOpenKeyExW RegCloseKey RegDeleteKeyW RegDeleteValueW RegCreateKeyExW RegSetValueExW RegQueryValueExW RegEnumValueW

comctl32

ImageList_AddMasked ImageList_Destroy ord17 ImageList_Create

ole32

CoTaskMemFree OleInitialize OleUninitialize CoCreateInstance

version

GetFileVersionInfoSizeW GetFileVersionInfoW VerQueryValueW

Name

.text

Size

27KB

Virtual Size

27KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

11KB

Virtual Size

10KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

415KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.ndata

Size

Virtual Size

516KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

13KB

Virtual Size

13KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

.data

SHA256 637a3943c555de3601588a8398252a905d18c17f9d49f750b812daa630abac68
MD5 014871d9a00f0e0c8c2a7cd25606c453
SHA1 92d7e0d8d66861f702d867dac616b7d02bca94ec
SHA512 3f1e945759614a0e0ee05d8cc7c9d3a9f0b2954f64c173dd8f755d6b422c0b2f1f7a5c3af8aa54f3c6909de65c125e048dd8d17ee55da3989c4b2c807d83874c
MD5 SHA1 SHA512

.rdata

SHA256 b38b34dfbb61b5fc0659b9861f09dfdaaa743cb97bf0134e7bab66a75ddc940e
MD5 07990aaa54c3bc638bb87a87f3fb13e3
SHA1 05985b7f60a664d2595e9406ae3b208c97597bbc
SHA512 0017dd49d85c6aa9e8351c7da60f1150cb241022664151f0d2182a7a344f46286eb9f131f75a5f1adcef57a1362689a3c40a37547acc262aba92b742c13b65ad
SSDEEP 192:wiR1IorPNhxjQFOdiq343py7JRWVS7yWymPn:9RiaPblQFdq343pwrWVaymPn
MD5 SHA1 SHA512 SSDEEP

.reloc

SHA256 98c437a2fc0237a72b6e089d2daa47fa3686fd6377f34fcb208fdf7ca7089d44
MD5 ed3e845968ee0bef9f891bbec6c7f6e4
SHA1 0db8590b0dc6e5e7502b1fbea74c53461222d984
SHA512 260464a4955a1d197231fdbaa4c5fdb5eead56bda6a3804aea14d125fac64a19330d8e97e8f95a1d599b4f704381af50fa540dd49b25a07044c1772f91641695
MD5 SHA1 SHA512

.rsrc/DIALOG/105

SHA256 fecdb955f8d7f1c219ff8167f90b64f3cb52e53337494577ff73c0ac1dafcd96
MD5 3409f314895161597f3c395cc5f65525
SHA1 1a99d016d65e567f24449d9362afb6ac44006d0b
SHA512 f3e7394fa49325a7ea46728b77a5e819e18d63049d54c6adf36d08619709484f8bbd20206416d3c1440bd70632d99d9a45f3488482353f90aa21aa6ee3915427
MD5 SHA1 SHA512

.rsrc/DIALOG/106

SHA256 69897c784f1491eb3024b0d52c2897196a2e245974497fda1915db5fefcf8729
MD5 2d12c45dc2c029044aaff357141cb900
SHA1 083db861ab3c7db23c6257878296e73a89a74b8b
SHA512 a50dcf605a914f0a6f94b3f815be159c2b729d005a25d6cc9120c4d34445cae2d0b20df3dbdc7672f316010c6a47079265548a1ed5a523896963b1a3ddf98a17
MD5 SHA1 SHA512

.rsrc/DIALOG/111

SHA256 85025c8556952f6a651c2468c8a0d58853b0ba482be9ad5cd3060f216540dfc0
MD5 6be4e1387d369cf86e68eacbdd0e81dd
SHA1 351970fe2681b9b35b5d59ad052011ed96a96e17
SHA512 b81b287de73282cc5a7337559fbce5af01d1a440f04ee97c6a8e1de0c787ef38936c951b802014b841fc517fe7f2b916266dc8c35cd5de1ad0c630dc2218fa81
MD5 SHA1 SHA512

.rsrc/GROUP_ICON/103

SHA256 c040936039beb90a6dd7db276ebf7c6f6c593c88ba622a5c07afb9ea045c74c6
MD5 249a0c17349678cee9c63d5c957bd89a
SHA1 e460f90482c911e6ae2735f2879bb6f76774c8e0
SHA512 d329683c489fa6005aadfa3a7401e4a0d852964cbe88b771f884b92ac55cc76464123d9803201119a1af5ac792e9e597a6a41216bac4dc627d94e987c040e527
MD5 SHA1 SHA512

.rsrc/ICON/1

SHA256 755ee934fb09398dfe1fb9410cbc752a77b93ccbc6b7aba6cb6dc4a93ba1c407
MD5 4aa334fa5c4c895ef832293fa1e85bd0
SHA1 9ac559bfee2ded3a4fe8cf895497139565902fdb
SHA512 c03b101197d1b891d46e781c4ae748dbba7c20643520a404a9730359cb664568536e37062cc9e462d5824f5fdc65bea2fe3d4f947d16a05d89306c2a783f75c2
SSDEEP 192:FC37tGZgTDjFH5obEkLUkmG50/hXCpoSGNCX7n5VPo3RZE:F+7tvDjFH5VQUyGhXIoLNClVPoBZE
MD5 SHA1 SHA512 SSDEEP

.rsrc/ICON/2

SHA256 754ac6ddb96855a4aaec2cb329ec7f931e87696a1b672dc551803ccdda7e225c
MD5 89a4bf077d8d674aa9e8b5533d624ef6
SHA1 96972870b84359c8a06d79e489a3d45ecca91966
SHA512 e6f36e7546305f5779c44bcad81127a6e0f64fd8a7e96e82ee960ead60e0b8df4270787989d2a70785d84c851297fc8e07380400501867310d1975b5a2a280b4
MD5 SHA1 SHA512

.rsrc/ICON/3.ico

SHA256 279672519f03fbf944a396c7fccf51a099f801b547e4a45cc41aac0ec18019f1
MD5 8996d9216e43bb319aec0a15fa81543b
SHA1 1d82769d6ceadac062b108c27150871f31e5460a
SHA512 662cced23deeee8e85bd3775572b0f67ee0267f96bd0e171dad54ddfcff1efec6e605eddc2e2f32fed140ea2aa807f0d5a7bee776d53ac2f023acfe5e64461c0
MD5 SHA1 SHA512

.rsrc/MANIFEST/1

SHA256 2bf05590410fb6b30494a3251789f0d8a4b9da7f3e87fe89b64cace1bc0a02cd
MD5 98532ccf2df2c019bd9791a767c99973
SHA1 8a1cb5e5cf470e6b3ab544bf8009132d87d2326b
SHA512 2f3ae5393b95c33c17702d5d358c6545457112d96e2a3a8d7a2fd82bbaff6a82b29787d95b3c6f4dc69cc23373c8e129057f80b1e4ca072d3f4f1752067d664a
MD5 SHA1 SHA512

.text

SHA256 6cbf0a221c26d69af8cab6a9925b0b331082df7f79d671fafe3f4942145c76a3
MD5 00499a6f70259150109c809d6aa0e6ed
SHA1 3f4c995439cec283f1f51d71acb1f25bef740b63
SHA512 bad533ac5b9872c345212e7d70e23ab02dfa73b42882f76b45448d0a238afd1773e60ad755102a6d7b978af30acd78b0283b7f7f45c2cea9eacf869ea787a87d
SSDEEP 768:ZSuEBr5TxZ3ILakH+MQTbTf1YK5dEde6w4tKmc3K1RHpuiCYy:BErPZ3IBZcbTfu1HlrJFCP
MD5 SHA1 SHA512 SSDEEP

CERTIFICATE

SHA256 b69acee6013447e802763adcb141bd8024480b9ac9cc7b2d288bf4f5f550494b
MD5 4a39975bb66c29d5c3419a25a7714b53
SHA1 7474cf7e1e8ab2b8a722fd4b27a2a15e4f7a60c0
SHA512 0848aeb80581cd31594420185001b627ed83818b3a12afd51b6cab8c68dab1c18a71442302f448e9494ce0dd4778a424a060c490913063188e168a267ce2e4b5
SSDEEP 192:tIYiYF8fIxP3vu3FLcFoCS35IVnEy2sE9jBF0NyHZnS:tIYi0v2VwzSJIVE8E9VF0NyHA
MD5 SHA1 SHA512 SSDEEP

[0]

SHA256 8f4fff35166f08142b23bf90e5c36f72c3a730b549d172768c2fa855a338122e
MD5 f4f0c5282559707670a306c46097ffcc
SHA1 3417351819d02450b527af5b3dbba95c52f911e5
SHA512 ebda56045c88ad3b87a896e06cf3747d411a28e4270554de5ad25a28343a4b3f54008dc4458e624097ea157208e2944d67c64770346047a202e0d978adf88175
MD5 SHA1 SHA512

[1]

SHA256 558aa94bfe9243fb6154ee2805caf0a18bb611a761ba4b97cf4517cd65bf08c1
MD5 00f4a33fba0bf9fb073e9edee636c67f
SHA1 e897a0b55af232243ee019361a8e8c4ba7a5d4dc
SHA512 9112a467a4bcbaa1d7084b9415e0ce6c5da9a49ad3593511fa7a112ba19dc73e2122f39daf2b8bb384c001631946ca7c7878014078362107f1d3c155b1e9d814
SSDEEP 24576:bWcdxMCkM3syvXCvtM6dM0fD/RLJziEpuJFvf+ZjC4B9Ik:bWcdxMC38+SvtM6dvV1zBpufvGC4B9Ik
MD5 SHA1 SHA512 SSDEEP

Sharing

General

Malware Config

Signatures

File Explorer