DiscordClient[.]exe

General

Target
DiscordClient.exe
Size 6.2MB
Sample250710-tk8qdavkw4
SHA256 2d3272c4e2daca9621f56b0724743c467a8a70cd30826b505bb7c3d3a1dfd482
MD5 1579988168051a140f9b3730a887a5ac
SHA1 2912ad1955e8ac3e96171bdc244aeee61b7b9af0
SHA512 f37449cbc08fb97e45453165106c5ac4be31661f9d356bb1aa83af735a36eec64aa49604b57ed15844bdd0a74e6bfc95a9dcb20bfd1c18c6727c5e07b3d9d364
SSDEEP 196608:zCC8QfL0rNgXylky+Y4b+ZZ3V6fd/V6wEhp0C/y+N9:dfGuyZ4iV6fd/chp2A
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
DiscordClient.exe

File Explorer

DiscordClient.exe

.exe 6.2MB

DiscordClient.exe

IMPHASH 7af9d139fdc69dd2700eb5a432494d54
SHA256 2d3272c4e2daca9621f56b0724743c467a8a70cd30826b505bb7c3d3a1dfd482
MD5 1579988168051a140f9b3730a887a5ac
SHA1 2912ad1955e8ac3e96171bdc244aeee61b7b9af0
SHA512 f37449cbc08fb97e45453165106c5ac4be31661f9d356bb1aa83af735a36eec64aa49604b57ed15844bdd0a74e6bfc95a9dcb20bfd1c18c6727c5e07b3d9d364
SSDEEP 196608:zCC8QfL0rNgXylky+Y4b+ZZ3V6fd/V6wEhp0C/y+N9:dfGuyZ4iV6fd/chp2A
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

5552

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\Users\Admin\Desktop\process-inj\x64\Release\DiscordClient.pdb

kernel32

WriteProcessMemory ResumeThread GetModuleHandleA CloseHandle GetThreadContext GetProcAddress VirtualAllocEx ReadProcessMemory CreateProcessA SetThreadContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess GetModuleHandleW GetStartupInfoW IsDebuggerPresent InitializeSListHead GetSystemTimeAsFileTime GetCurrentThreadId GetCurrentProcessId QueryPerformanceCounter IsProcessorFeaturePresent RtlCaptureContext

vcruntime140

__C_specific_handler __current_exception __current_exception_context memset memcpy

api-ms-win-crt-utility-l1-1-0

srand rand

api-ms-win-crt-time-l1-1-0

_time64

api-ms-win-crt-runtime-l1-1-0

_crt_atexit _initialize_onexit_table _c_exit _seh_filter_exe _set_app_type _register_onexit_function terminate _configure_narrow_argv _cexit _register_thread_local_exe_atexit_callback _exit exit _initterm_e _initterm _get_narrow_winmain_command_line _initialize_narrow_environment

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-stdio-l1-1-0

_set_fmode __p__commode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

_set_new_mode free

Sharing