Discord Installer[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
Discord Installer.exe
Size 61KB
Sample260820-ce4e2adm3t
SHA256 7cdd9ef09d710e350ba4ce4a195083b3aff7050894686deeef84e4c30702a08c
MD5 8948d0c94de9b427fba2f26baa3dd273
SHA1 1948f9010a071e608c64f1b5c76c4b967bf25085
SHA512 5ed33b3f0b1387e175b25c64480ab3f09659bc601dc0a32299ab5ed496e4ac110b2328d13a620f5fc854b36644d2e7a3f3d9d98e4f217cf7553e121c68ebf2e2
SSDEEP 1536:qMw5j7b4zywsfR7HVbEvqn7ZgivjbIROMOzvuL:cD4zyh711ZZjcUzvuL
TLSH
T173532A2E67D106FCD078C67AC6E2A5A1E532B0088B7059DF078081D68F676D1CF79E6B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Discord Installer.exe

File Explorer

Discord Installer.exe

.exe 61KB

Discord Installer.exe

IMPHASH 4a322e09b7459f05c9d0d2643432d997
SHA256 7cdd9ef09d710e350ba4ce4a195083b3aff7050894686deeef84e4c30702a08c
MD5 8948d0c94de9b427fba2f26baa3dd273
SHA1 1948f9010a071e608c64f1b5c76c4b967bf25085
SHA512 5ed33b3f0b1387e175b25c64480ab3f09659bc601dc0a32299ab5ed496e4ac110b2328d13a620f5fc854b36644d2e7a3f3d9d98e4f217cf7553e121c68ebf2e2
SSDEEP 1536:qMw5j7b4zywsfR7HVbEvqn7ZgivjbIROMOzvuL:cD4zyh711ZZjcUzvuL
TLSH
T173532A2E67D106FCD078C67AC6E2A5A1E532B0088B7059DF078081D68F676D1CF79E6B
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

43848

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\Users\User\source\repos\v2\x64\Release\v2.pdb

kernel32

GetCurrentProcessId GetSystemTimeAsFileTime GetCurrentThreadId QueryPerformanceCounter GetStartupInfoW IsDebuggerPresent IsProcessorFeaturePresent TerminateProcess SetUnhandledExceptionFilter UnhandledExceptionFilter RtlVirtualUnwind RtlLookupFunctionEntry GetPrivateProfileStringA SetPriorityClass GetModuleHandleW WritePrivateProfileStringA GetCurrentThread Sleep SetThreadPriority GetCurrentProcess InitializeSListHead RtlCaptureContext

user32

GetAsyncKeyState SetTimer MapVirtualKeyA RegisterHotKey ShowWindow UnhookWindowsHookEx DefWindowProcA CreateWindowExA SetLayeredWindowAttributes CallNextHookEx RegisterClassA SetWindowRgn keybd_event GetDC DestroyWindow DispatchMessageA PostMessageW GetMessageA ScreenToClient SendInput EndPaint BeginPaint UnregisterHotKey ReleaseDC InvalidateRect SetForegroundWindow PostQuitMessage KillTimer GetClientRect SetWindowsHookExW LoadCursorW TranslateMessage

gdi32

TextOutA CreateSolidBrush DeleteObject Ellipse SelectClipRgn CreatePen SetBkMode SetTextColor DeleteDC CreateRectRgn CreateRoundRectRgn GetStockObject CreateCompatibleDC SelectObject CreateFontA CreateCompatibleBitmap BitBlt RoundRect

shell32

ShellExecuteA

msvcp140

_Thrd_join _Thrd_id _Cnd_do_broadcast_at_thread_exit ?_Xlength_error@std@@YAXPEBD@Z ?_Xout_of_range@std@@YAXPEBD@Z ?_Xinvalid_argument@std@@YAXPEBD@Z ?_Throw_Cpp_error@std@@YAXH@Z

winmm

timeBeginPeriod timeEndPeriod

vcruntime140_1

__CxxFrameHandler4

vcruntime140

memset __current_exception_context __current_exception _CxxThrowException __C_specific_handler __std_exception_copy __std_exception_destroy memcmp memcpy memmove

api-ms-win-crt-utility-l1-1-0

rand srand

api-ms-win-crt-string-l1-1-0

toupper

api-ms-win-crt-runtime-l1-1-0

exit _c_exit _initterm_e _initterm _get_narrow_winmain_command_line _set_app_type _seh_filter_exe _cexit _configure_narrow_argv _invoke_watson _crt_atexit _beginthreadex _exit _register_onexit_function _initialize_onexit_table _initialize_narrow_environment terminate _register_thread_local_exe_atexit_callback _errno

api-ms-win-crt-stdio-l1-1-0

_set_fmode __p__commode __stdio_common_vsprintf_s

api-ms-win-crt-convert-l1-1-0

strtol

api-ms-win-crt-time-l1-1-0

_time64

api-ms-win-crt-heap-l1-1-0

_set_new_mode malloc free _callnewh

api-ms-win-crt-math-l1-1-0

ceilf __setusermatherr

api-ms-win-crt-locale-l1-1-0

_configthreadlocale