discord_game_sdk[.]dll

Sharing

Copy URL Twitter E-mail

General

Target
discord_game_sdk.dll
Size 3.7MB
Sample260922-msfagatfmg
SHA256 527768710ddb0953fce5eb1700c2566b6451135d76f1d0610b63907cd5ba94c5
MD5 d8cc567718550ae35c1566c3315b90df
SHA1 e5d8120a8a8583fe7e3177ae7d8fe797c002f263
SHA512 5e1d72bbb466d032596147dd1a90f5ebcaa82d3d56ee7a0b1aa3a37d4bb42e1fcb510b269451a1b9c7f3b8a1c18b1c5f530b200f2fbbe2ec990b4e1c12e6f5e8
SSDEEP 49152:cxytJCv8RbSimYQSaKCZhYtOVt7CPjitem2vUkcWDnVf6OuBimHdXopJErae4/KC:lD400amm+8m4
TLSH
T12B0648213A56647CC1ABC4B483874A725E3234CB1B35BAFF45D156782F69AF46F3C228
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Insecure Codesign Algorithm 1 IoCs

File was codesigned using an insecure algorithm.

resource
discord_game_sdk.dll

File Explorer

discord_game_sdk.dll

.dll 3.7MB

discord_game_sdk.dll

IMPHASH e2e8552d3acf24f9596a702c655d73d8
SHA256 527768710ddb0953fce5eb1700c2566b6451135d76f1d0610b63907cd5ba94c5
MD5 d8cc567718550ae35c1566c3315b90df
SHA1 e5d8120a8a8583fe7e3177ae7d8fe797c002f263
SHA512 5e1d72bbb466d032596147dd1a90f5ebcaa82d3d56ee7a0b1aa3a37d4bb42e1fcb510b269451a1b9c7f3b8a1c18b1c5f530b200f2fbbe2ec990b4e1c12e6f5e8
SSDEEP 49152:cxytJCv8RbSimYQSaKCZhYtOVt7CPjitem2vUkcWDnVf6OuBimHdXopJErae4/KC:lD400amm+8m4
TLSH
T12B0648213A56647CC1ABC4B483874A725E3234CB1B35BAFF45D156782F69AF46F3C228
MD5 SHA1 SHA512 SSDEEP TLSH

Insecure Codesign Algorithm

File was codesigned using an insecure algorithm.

Digest

1b:64:b0:ac:d8:16:1d:e5:87:74:8b:bc:b7:69:1b:a6:ef:fe:9d:d6

Digest Algorithm

sha1

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=5128862,CN=Discord Inc.,O=Discord Inc.,L=San Francisco,ST=California,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553

Chains

Nov 27, 2019

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

Serial Number

02:8a:a6:e7:b5:16:c0:d1:55:f1:5d:62:90:a4:30:e3

Issuer

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Mar 26, 2018 - Mar 31, 2021

Subject

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 18, 2012 - Apr 18, 2027

Subject

CN=DigiCert Timestamp Responder,O=DigiCert,C=US

Serial Number

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66

Issuer

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 22, 2014 - Oct 22, 2024

Subject

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageServerAuth, ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning, ExtKeyUsageEmailProtection, ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Nov 10, 2006 - Nov 10, 2021

Minor OS version

Major OS version

Entry point

2801844

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

c:\b\tyrande-1\discord\discord-game-sdk\target\x86_64-pc-windows-msvc\release\deps\discord_game_sdk.pdb

ws2_32

closesocket sendto getaddrinfo WSAStartup freeaddrinfo WSACleanup WSASocketW ioctlsocket recv bind WSAGetLastError

kernel32

LCMapStringW WideCharToMultiByte MultiByteToWideChar GetCommandLineA GetCPInfo GetOEMCP GetACP IsValidCodePage FindFirstFileExW GetModuleHandleExW LoadLibraryExW TlsFree InitializeCriticalSectionAndSpinCount EncodePointer LoadLibraryW GetLastError GetProcAddress FreeLibrary GetModuleFileNameW SetErrorMode SetThreadErrorMode lstrlenW WaitForSingleObject GetExitCodeProcess CloseHandle GetFileInformationByHandle CancelIoEx WriteFile ReadFile GetOverlappedResult FlushFileBuffers CreateIoCompletionPort GetQueuedCompletionStatusEx PostQueuedCompletionStatus SetHandleInformation GetSystemInfo RtlVirtualUnwind GetSystemTimeAsFileTime QueryPerformanceCounter QueryPerformanceFrequency GetCurrentThread RtlCaptureContext LoadLibraryA DeleteCriticalSection LeaveCriticalSection FreeEnvironmentStringsW FindClose SwitchToThread SetLastError GetCurrentDirectoryW GetEnvironmentStringsW GetEnvironmentVariableW GetTempPathW GetCommandLineW SetFilePointerEx InitializeCriticalSection EnterCriticalSection TerminateProcess GetCurrentProcessId GetProcessHeap HeapAlloc TlsAlloc TlsGetValue TlsSetValue HeapReAlloc GetModuleHandleW GetStdHandle FindNextFileW CreateFileW DeviceIoControl CreateDirectoryW FindFirstFileW DeleteFileW FormatMessageW ExitProcess CreateThread GetConsoleMode WriteConsoleW ReleaseMutex WaitForSingleObjectEx CreateMutexA InterlockedFlushSList GetFileType GetStringTypeW HeapSize SetStdHandle GetConsoleCP GetCurrentProcess HeapFree RaiseException RtlPcToFileHeader RtlUnwindEx IsProcessorFeaturePresent GetStartupInfoW SetUnhandledExceptionFilter UnhandledExceptionFilter IsDebuggerPresent RtlLookupFunctionEntry InitializeSListHead GetCurrentThreadId

advapi32

SystemFunction036 RegCloseKey RegCreateKeyTransactedW RegSetValueExW RegQueryValueExW RegOpenKeyExW

ktmw32

CommitTransaction CreateTransaction

ole32

CoTaskMemFree

shell32

ShellExecuteExW SHGetKnownFolderPath

Sharing

General

Malware Config

Signatures

File Explorer

discord_game_sdk.dll

ws2_32

kernel32

advapi32

ktmw32

ole32

shell32

generic