Discord_Nitro_Generator[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
Discord_Nitro_Generator.exe
Size 1.7MB
Sample260817-r6enbasekf
SHA256 d12420b7913e899cfa7f169bc6ec665bc98ea42fbb2eae286a38630282a18ab8
MD5 dc5db8a1daf41e308a6003b054a09d66
SHA1 b1c158e45274dcab4e7efb3105e0b10a2dc7294c
SHA512 d44675e60156f49269e0a3ccc14b0fbe01597ba52cfff7a8408f3a3ae1c4119d9799c4cd45f2c725a6805dc21b0c8388247beabc683f5c9670e3d8c7997e83ca
SSDEEP 24576:M54qe9aBR7XF73PpKab+Nny2uGbM3v4q79dVad5Z/V29zKzs5A8e9lprQo6yT9HX:Mre9aBR79pKamAM24q7gdRezKIWtQWR3
TLSH
T111852314721625FAE2B792B9D5A78A41F6B13C4A977096CF13D00BB1AF13BE09D3E710
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Discord_Nitro_Generator.exe

File Explorer

Discord_Nitro_Generator.exe

.exe 1.7MB

Discord_Nitro_Generator.exe

IMPHASH 613020d403d36254cfabe838cee15160
SHA256 d12420b7913e899cfa7f169bc6ec665bc98ea42fbb2eae286a38630282a18ab8
MD5 dc5db8a1daf41e308a6003b054a09d66
SHA1 b1c158e45274dcab4e7efb3105e0b10a2dc7294c
SHA512 d44675e60156f49269e0a3ccc14b0fbe01597ba52cfff7a8408f3a3ae1c4119d9799c4cd45f2c725a6805dc21b0c8388247beabc683f5c9670e3d8c7997e83ca
SSDEEP 24576:M54qe9aBR7XF73PpKab+Nny2uGbM3v4q79dVad5Z/V29zKzs5A8e9lprQo6yT9HX:Mre9aBR79pKamAM24q7gdRezKIWtQWR3
TLSH
T111852314721625FAE2B792B9D5A78A41F6B13C4A977096CF13D00BB1AF13BE09D3E710
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

32752

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

user32

TranslateMessage SystemParametersInfoA LoadCursorA GetClientRect GetWindowTextA SetWindowTextA GetSystemMetrics SetFocus SetWindowPos ShowWindow DestroyWindow CreateWindowExA RegisterClassA PostQuitMessage DefWindowProcA SendMessageA DispatchMessageA GetMessageA

gdi32

SetBkColor GetStockObject CreateSolidBrush CreateFontA SetTextColor

shell32

SHGetFolderPathA ShellExecuteExA

advapi32

OpenProcessToken GetTokenInformation

kernel32

GetProcessHeap LCMapStringW SetEndOfFile FlushFileBuffers CreateFileW ReadConsoleW HeapSize LoadLibraryExW HeapReAlloc GetStringTypeW WriteConsoleW VirtualProtect SetLastError CreateFileA DeleteFileA GetFileAttributesA GetFileSizeEx ReadFile GetTempPathA CloseHandle WaitForSingleObject Sleep GetCurrentProcess GetCurrentProcessId TerminateProcess CreateThread OpenProcess GetModuleFileNameA CreateToolhelp32Snapshot Process32First Process32Next GetTickCount GetModuleHandleA QueryPerformanceCounter GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead SetUnhandledExceptionFilter GetStartupInfoW GetModuleHandleW SetStdHandle RtlPcToFileHeader RaiseException RtlLookupFunctionEntry RtlUnwindEx GetLastError FlsAlloc FlsGetValue FlsSetValue FlsFree EncodePointer EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection GetStdHandle WriteFile GetModuleFileNameW ExitProcess FreeLibrary GetModuleHandleExW GetProcAddress IsProcessorFeaturePresent HeapFree RtlCaptureContext RtlVirtualUnwind IsDebuggerPresent UnhandledExceptionFilter GetConsoleOutputCP GetConsoleMode SetFilePointerEx HeapAlloc GetFileType FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW MultiByteToWideChar WideCharToMultiByte GetEnvironmentStringsW FreeEnvironmentStringsW

Name

.text

Size

128KB

Virtual Size

128KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

57KB

Virtual Size

57KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

3KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

6KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

Discord_Nitro_Generator.exe

user32

gdi32

shell32

advapi32

kernel32

generic