discord-quest-completer[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
discord-quest-completer.exe
Size 16.5MB
Sample260905-pegmgsdf97
SHA256 6ec063f19205e61cec74f50596d15aa429ab3b92d3531e83f63984ced64d466a
MD5 a3b6f91a30892bbfb90093bda3f64131
SHA1 e7bbbfd2b76222e8deb24a3acfc4f7272d3c13eb
SHA512 937df57e35bfba183782ea7c1e168fb09c6f1bd605051f3d347322ebf8bfc72e0a026bf361e2a3082939437e12237093373012da745f77886d1c2f3b3357d3f7
SSDEEP 98304:J+a26rUc3ES+BiuWlVlSjEuGqOIcgWGWb1dyktRaN4yOIrdgjmu+PEvfGnfqk1y3:J+orUc3EcHuGIcIkVm4fmfrnPEj
TLSH
T12C0707257B5BA9ADC09BC4B483474A725A3170CB0B35B9FF44C492382F69BF42F38659
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
discord-quest-completer.exe

File Explorer

discord-quest-completer.exe

.exe 16.5MB

discord-quest-completer.exe

IMPHASH 3ebc9072499789c2ad62dc630bf5d20d
SHA256 6ec063f19205e61cec74f50596d15aa429ab3b92d3531e83f63984ced64d466a
MD5 a3b6f91a30892bbfb90093bda3f64131
SHA1 e7bbbfd2b76222e8deb24a3acfc4f7272d3c13eb
SHA512 937df57e35bfba183782ea7c1e168fb09c6f1bd605051f3d347322ebf8bfc72e0a026bf361e2a3082939437e12237093373012da745f77886d1c2f3b3357d3f7
SSDEEP 98304:J+a26rUc3ES+BiuWlVlSjEuGqOIcgWGWb1dyktRaN4yOIrdgjmu+PEvfGnfqk1y3:J+orUc3EcHuGIcIkVm4fmfrnPEj
TLSH
T12C0707257B5BA9ADC09BC4B483474A725A3170CB0B35B9FF44C492382F69BF42F38659
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

10998896

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

discord_quest_completer.pdb

kernel32

RtlVirtualUnwind DeleteCriticalSection InitializeCriticalSectionAndSpinCount CreateFileW SetNamedPipeHandleState lstrlenW LoadLibraryA HeapAlloc IsProcessorFeaturePresent GetProcessHeap RtlUnwindEx RtlPcToFileHeader RaiseException SetUnhandledExceptionFilter UnhandledExceptionFilter IsDebuggerPresent HeapFree InitializeSListHead GetProcAddress SleepConditionVariableSRW WakeAllConditionVariable CreateMutexA WaitForSingleObjectEx LoadLibraryW AcquireSRWLockExclusive WideCharToMultiByte ReleaseSRWLockExclusive MultiByteToWideChar GetConsoleOutputCP CreateProcessW GetWindowsDirectoryW GetSystemDirectoryW GetFinalPathNameByHandleW DeviceIoControl CreateDirectoryW GetFileInformationByHandleEx FindNextFileW SetEnvironmentVariableW GetTempPathW GetFullPathNameW SetWaitableTimer CreateWaitableTimerExW CreateThread WaitForMultipleObjects ReadFileEx ExitProcess CancelIo LCIDToLocaleName GetSystemTimeAsFileTime GetCurrentThreadId ReleaseMutex HeapReAlloc CopyFileExW FindClose FindFirstFileExW GetFileAttributesW OutputDebugStringA OutputDebugStringW GetModuleFileNameW GetLastError EncodePointer TlsAlloc TlsGetValue TlsSetValue LoadLibraryExW GetModuleHandleW FreeLibrary GetEnvironmentVariableW GetSystemTimePreciseAsFileTime QueryPerformanceFrequency TerminateProcess GetUserDefaultUILanguage WriteConsoleW GetExitCodeProcess SleepEx WriteFileEx TlsFree GetCurrentProcessId GetStdHandle SetFilePointerEx DuplicateHandle GetCurrentProcess SetFileInformationByHandle GetCommandLineW GetEnvironmentStringsW GetCurrentDirectoryW SetLastError RtlLookupFunctionEntry RtlCaptureContext GetSystemInfo QueryPerformanceCounter SwitchToThread SetHandleInformation GetCurrentThread SetThreadStackGuarantee AddVectoredExceptionHandler CompareStringOrdinal FreeEnvironmentStringsW GetModuleHandleA Sleep GetConsoleMode CreateIoCompletionPort CancelIoEx ReadFile GetOverlappedResult WriteFile PostQueuedCompletionStatus GetQueuedCompletionStatusEx GetFileInformationByHandle CloseHandle FormatMessageW WaitForSingleObject SetFileCompletionNotificationModes CreateEventW LoadLibraryExA

advapi32

RegCreateKeyExW RegSetValueExW RegQueryValueExW RegOpenKeyExW SystemFunction036 EventRegister EventSetInformation EventWriteTransfer EventUnregister RegGetValueW RegCloseKey

api-ms-win-core-synch-l1-2-0

WakeByAddressAll WaitOnAddress WakeByAddressSingle

bcryptprimitives

ProcessPrng

shell32

ord190 ord155 ShellExecuteExW SHCreateItemFromParsingName SHGetKnownFolderPath DragQueryFileW DragFinish SHOpenFolderAndSelectItems SHAppBarMessage

ole32

CoCreateInstance CoTaskMemFree CoUninitialize CoInitializeEx RevokeDragDrop RegisterDragDrop CoTaskMemAlloc CoInitialize OleInitialize

user32

DestroyAcceleratorTable CreateMenu DestroyMenu RemoveMenu DrawMenuBar SetMenu DrawTextW GetWindowDC OffsetRect GetMenuBarInfo GetMenuItemInfoW TranslateAcceleratorW DestroyWindow ToUnicodeEx InsertMenuW GetKeyState GetAsyncKeyState GetKeyboardState SendInput SetForegroundWindow GetWindowTextW AppendMenuW GetWindowTextLengthW SetWindowTextW SetMenuItemInfoW MonitorFromPoint EnumDisplayMonitors SystemParametersInfoA SetPropW IsWindowVisible GetMenu GetKeyboardLayout GetRawInputData CreateIcon SetWindowDisplayAffinity ClipCursor GetClipCursor ShowCursor SetWindowLongW EnableMenuItem GetSystemMenu ScreenToClient GetWindowLongW ClientToScreen DestroyIcon SystemParametersInfoW ReleaseCapture SetCapture SetWindowLongPtrW MsgWaitForMultipleObjectsEx RegisterRawInputDevices IsProcessDPIAware SetParent MapWindowPoints MonitorFromRect RegisterWindowMessageA ShowWindow CreateAcceleratorTableW TrackMouseEvent ReleaseDC GetDC CheckMenuItem DrawIconEx TrackPopupMenu IsWindowEnabled RedrawWindow PostQuitMessage EnableWindow GetWindowLongPtrW GetParent SetWindowRgn FindWindowExW GetTouchInputInfo AdjustWindowRect MapVirtualKeyExW GetForegroundWindow RegisterTouchWindow IsWindow AdjustWindowRectEx FlashWindowEx GetActiveWindow UpdateWindow InvalidateRect SetCursorPos InvalidateRgn GetWindowPlacement SetWindowPlacement ChangeDisplaySettingsExW DefWindowProcW GetMessageW MapVirtualKeyW IsIconic EnumChildWindows DispatchMessageA GetMessageA CreateWindowExW RegisterClassExW GetWindowRect GetClientRect SetWindowPos PostMessageW LoadCursorW DispatchMessageW TranslateMessage SendMessageW GetUpdateRect PeekMessageW PostThreadMessageW ValidateRect GetMonitorInfoW MonitorFromWindow GetCursorPos SetCursor FillRect GetSystemMetrics CloseTouchInputHandle CreatePopupMenu

comctl32

SetWindowSubclass DefSubclassProc TaskDialogIndirect RemoveWindowSubclass

gdi32

DeleteObject CombineRgn SetBkMode GetDeviceCaps SetTextColor CreateRectRgn CreateSolidBrush CreateCompatibleDC DeleteDC SelectObject CreateDIBSection BitBlt

dwmapi

DwmGetWindowAttribute DwmSetWindowAttribute DwmEnableBlurBehindWindow

shlwapi

SHCreateMemStream

ws2_32

WSACleanup getaddrinfo freeaddrinfo getsockopt WSAStartup getpeername getsockname WSASocketW bind connect ioctlsocket shutdown recv send WSASend setsockopt WSAIoctl WSAGetLastError closesocket

bcrypt

BCryptGenRandom

ntdll

NtWriteFile NtCreateFile NtReadFile RtlGetVersion NtCreateNamedPipeFile NtOpenFile NtCancelIoFileEx NtDeviceIoControlFile RtlNtStatusToDosError

oleaut32

SysFreeString SetErrorInfo SysStringLen GetErrorInfo

api-ms-win-crt-math-l1-1-0

trunc round __setusermatherr floor pow

api-ms-win-crt-string-l1-1-0

strcpy_s wcsncmp strcmp wcslen _wcsicmp strlen wcscmp

api-ms-win-crt-convert-l1-1-0

wcstol _wtoi _ultow_s

api-ms-win-crt-heap-l1-1-0

free _set_new_mode _callnewh malloc calloc

api-ms-win-crt-runtime-l1-1-0

_set_app_type _configure_narrow_argv _initialize_narrow_environment _seh_filter_exe _initterm _initterm_e exit _exit _get_initial_narrow_environment __p___argc __p___argv _cexit _c_exit _register_thread_local_exe_atexit_callback abort _initialize_onexit_table terminate _register_onexit_function _crt_atexit

api-ms-win-crt-stdio-l1-1-0

_set_fmode __p__commode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale