VencordInstaller_platinum[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
VencordInstaller_platinum.exe
Size 15.4MB
Sample260809-rx93vsgn3z
SHA256 d30d06a4dfadbe5c2694f5340da2939961852a24b7ee0c7a7cd0d76fd512700d
MD5 09bc217577d3ba52b846735019b4e1b1
SHA1 f942d3144b1f235ef3c72838ed57ac18ab55a179
SHA512 f27fbbb42b61c7bfa347a6793b1c06112854bd06918084ae5ef3a0170a3c5a9a822b9d731fa8fe1ba4961fa1e0e56d87f4392c816cda51b71522a26ef1520ec1
SSDEEP 393216:o6XTvbwXTw8TGvjJAFZGjJAFgPAmkyP1x:o+vMO1DQaz
TLSH
T174F6CFA5975C9B4EE066B038C583832797F17C0E1761DF8BBAC4AD775E2F184FA09209
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
VencordInstaller_platinum.exe

File Explorer

VencordInstaller_platinum.exe

.exe 15.4MB

VencordInstaller_platinum.exe

IMPHASH 0913e74519984891ba53e23d3d9ccec6
SHA256 d30d06a4dfadbe5c2694f5340da2939961852a24b7ee0c7a7cd0d76fd512700d
MD5 09bc217577d3ba52b846735019b4e1b1
SHA1 f942d3144b1f235ef3c72838ed57ac18ab55a179
SHA512 f27fbbb42b61c7bfa347a6793b1c06112854bd06918084ae5ef3a0170a3c5a9a822b9d731fa8fe1ba4961fa1e0e56d87f4392c816cda51b71522a26ef1520ec1
SSDEEP 393216:o6XTvbwXTw8TGvjJAFZGjJAFgPAmkyP1x:o+vMO1DQaz
TLSH
T174F6CFA5975C9B4EE066B038C583832797F17C0E1761DF8BBAC4AD775E2F184FA09209
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

8832312

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

winhttp

WinHttpCrackUrl

d3d11

D3D11CreateDeviceAndSwapChain

ntdll

RtlUnwindEx RtlPcToFileHeader RtlCaptureContext VerSetConditionMask RtlVirtualUnwind RtlLookupFunctionEntry RtlUnwind

kernel32

GlobalFree MultiByteToWideChar WideCharToMultiByte GetLocaleInfoA Sleep SwitchToThread GetSystemInfo VirtualQueryEx GetConsoleWindow CloseHandle GetProcessId OpenProcess VirtualAllocEx ReadProcessMemory WriteProcessMemory lstrcmpiW CreateToolhelp32Snapshot Process32FirstW Process32NextW Module32First Module32Next GetTempPathA GetCurrentProcessId GetLocalTime GetLastError GetVolumeInformationA GetComputerNameA DeleteFileA GetModuleFileNameA GetCurrentThread SetThreadPriority GetStdHandle SetCurrentDirectoryA IsDebuggerPresent AddVectoredExceptionHandler ReleaseMutex GetCurrentProcess GetExitCodeProcess GetThreadContext GetTickCount64 AllocConsole GetConsoleMode SetConsoleMode SetConsoleTitleA CreateFileA GetFileSize ReadFile DuplicateHandle RaiseException SetUnhandledExceptionFilter SetErrorMode HeapAlloc HeapFree GetProcessHeap TerminateProcess GetCurrentThreadId InitializeProcThreadAttributeList DeleteProcThreadAttributeList UpdateProcThreadAttribute SetThreadContext VirtualQuery GlobalLock GetFileSizeEx HeapReAlloc MapViewOfFile UnmapViewOfFile CreateFileMappingA GetEnvironmentStringsW GetCommandLineW GetCommandLineA GetOEMCP GetACP IsValidCodePage GetTimeZoneInformation SetFilePointerEx ReadConsoleW GetConsoleOutputCP FlushFileBuffers GetFileType EnumSystemLocalesW GetUserDefaultLCID IsValidLocale GetLocaleInfoW LCMapStringW CompareStringW GetTimeFormatW GetDateFormatW VirtualProtect FlsFree FlsSetValue FlsGetValue FlsAlloc WriteFile GetModuleFileNameW ExitProcess FreeLibraryAndExitThread ExitThread CreateThread LoadLibraryExW TlsFree TlsSetValue TlsGetValue TlsAlloc InitializeCriticalSectionAndSpinCount SetLastError InitializeSListHead GetStartupInfoW UnhandledExceptionFilter GetStringTypeW LCMapStringEx GetCPInfo DecodePointer EncodePointer GetSystemTimeAsFileTime GlobalUnlock GlobalAlloc WriteConsoleW LoadLibraryA GetProcAddress GetModuleHandleA FreeLibrary QueryPerformanceFrequency QueryPerformanceCounter FreeEnvironmentStringsW SetEnvironmentVariableW DeleteCriticalSection InitializeCriticalSectionEx LeaveCriticalSection SetStdHandle HeapSize SetEndOfFile EnterCriticalSection GetFileInformationByHandleEx GetModuleHandleW ReleaseSRWLockExclusive ReleaseSRWLockShared AcquireSRWLockExclusive AcquireSRWLockShared TryAcquireSRWLockExclusive SleepConditionVariableSRW WakeAllConditionVariable InitOnceBeginInitialize InitOnceComplete FormatMessageA FreeLibraryWhenCallbackReturns CreateThreadpoolWork SubmitThreadpoolWork CloseThreadpoolWork GetModuleHandleExW IsProcessorFeaturePresent LocalFree GetLocaleInfoEx CreateFileW FindClose FindFirstFileW FindFirstFileExW FindNextFileW GetFileAttributesExW AreFileApisANSI

user32

GetMessageExtraInfo OpenClipboard CloseClipboard SetClipboardData GetKeyboardLayout EmptyClipboard GetKeyState GetAsyncKeyState GetCapture SetCapture TrackMouseEvent GetClipboardData IsWindowUnicode MonitorFromPoint SetWindowLongA GetWindowLongA MessageBoxA UpdateWindow GetSystemMetrics SetWindowDisplayAffinity SetLayeredWindowAttributes DestroyWindow CreateWindowExA RegisterClassExA UnregisterClassA PostQuitMessage DefWindowProcA PeekMessageA DispatchMessageA TranslateMessage SystemParametersInfoA GetWindowThreadProcessId EnumWindows GetForegroundWindow GetWindowRect SetWindowPos ShowWindow SendInput IsWindow LoadCursorA ScreenToClient ClientToScreen GetCursorPos SetCursor SetCursorPos GetClientRect ReleaseDC GetDC ReleaseCapture

gdi32

GetDeviceCaps GetPixel

advapi32

RegOpenKeyExA RegSetValueExA RegCloseKey

shell32

ShellExecuteA

d3dcompiler_47

D3DCompile

dwmapi

DwmExtendFrameIntoClientArea

imm32

ImmSetCompositionWindow ImmSetCandidateWindow ImmReleaseContext ImmGetContext

winmm

timeBeginPeriod PlaySoundA

Name

.text

Size

8.7MB

Virtual Size

8.7MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

4.9MB

Virtual Size

4.9MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

1.8MB

Virtual Size

1.9MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

62KB

Virtual Size

61KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.CRT

Size

512B

Virtual Size

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

23KB

Virtual Size

23KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

7KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

VencordInstaller_platinum.exe

winhttp

d3d11

ntdll

kernel32

user32

gdi32

advapi32

shell32

d3dcompiler_47

dwmapi

imm32

winmm

generic