discord-rpc[.]dll[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
discord-rpc.dll.exe
Size 383KB
Sample260930-a7l1cabb85
SHA256 ad683f7ae2c912ef502fd802f256094fceaa238260115caaefb1913a13abd5e2
MD5 2ada8e69e61889e672671ec015a54ad1
SHA1 916bec6f2d9316652a1090d767f39edd4444c2a4
SHA512 f4f3edf44ac098a72bbf4e5ab4370608ff5c481104ec74a36b36ccb95c6ef04ab138cef10080e2a050a3f9247a161982ae82a2fba11608ea9b0e05252402a8b3
SSDEEP 6144:3mJ7nJu29RUHxbwFQ18S+PvHTkL5SqJJUFE+qlJakzfee1c61cBv:3mJ7nJHnU5xwQ5SKJPzf5jcBv
TLSH
T105845B5AFB6448B5E1679135C973854AE3B27C8D1B60D78F23A8435E2F33BA0853E721
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
discord-rpc.dll.exe

File Explorer

discord-rpc.dll.exe

.dll 383KB

discord-rpc.dll.exe

IMPHASH 293914ac82b04d32c243e6e36fe73039
SHA256 ad683f7ae2c912ef502fd802f256094fceaa238260115caaefb1913a13abd5e2
MD5 2ada8e69e61889e672671ec015a54ad1
SHA1 916bec6f2d9316652a1090d767f39edd4444c2a4
SHA512 f4f3edf44ac098a72bbf4e5ab4370608ff5c481104ec74a36b36ccb95c6ef04ab138cef10080e2a050a3f9247a161982ae82a2fba11608ea9b0e05252402a8b3
SSDEEP 6144:3mJ7nJu29RUHxbwFQ18S+PvHTkL5SqJJUFE+qlJakzfee1c61cBv:3mJ7nJHnU5xwQ5SKJPzf5jcBv
TLSH
T105845B5AFB6448B5E1679135C973854AE3B27C8D1B60D78F23A8435E2F33BA0853E721
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

51172

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

advapi32

RegCreateKeyExW RegOpenKeyExW RegQueryValueExW RegSetValueExW RegCloseKey

kernel32

CreateFileW ReadFile WriteFile CloseHandle GetLastError PeekNamedPipe WaitNamedPipeW GetCurrentProcessId GetModuleFileNameW lstrlenW MultiByteToWideChar DuplicateHandle WaitForSingleObjectEx Sleep GetCurrentProcess GetCurrentThread GetCurrentThreadId GetExitCodeThread QueryPerformanceCounter EnterCriticalSection LeaveCriticalSection TryEnterCriticalSection DeleteCriticalSection SetLastError InitializeCriticalSectionAndSpinCount CreateEventW TlsAlloc TlsGetValue TlsSetValue TlsFree GetSystemTimeAsFileTime GetTickCount GetModuleHandleW GetProcAddress WideCharToMultiByte SetEvent RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW IsProcessorFeaturePresent TerminateProcess InitializeSListHead CreateTimerQueue SignalObjectAndWait SwitchToThread CreateThread SetThreadPriority GetThreadPriority GetLogicalProcessorInformation CreateTimerQueueTimer ChangeTimerQueueTimer DeleteTimerQueueTimer GetNumaHighestNodeNumber GetProcessAffinityMask SetThreadAffinityMask RegisterWaitForSingleObject UnregisterWait EncodePointer GetThreadTimes FreeLibrary FreeLibraryAndExitThread GetModuleHandleA LoadLibraryExW GetVersionExW VirtualAlloc VirtualFree VirtualProtect ReleaseSemaphore InterlockedPopEntrySList InterlockedPushEntrySList InterlockedFlushSList QueryDepthSList UnregisterWaitEx LoadLibraryW RtlPcToFileHeader RaiseException RtlUnwindEx ExitThread GetModuleHandleExW HeapAlloc HeapFree ExitProcess GetModuleFileNameA LCMapStringW GetStdHandle GetFileType GetACP GetProcessHeap FindClose FindFirstFileExA FindNextFileA IsValidCodePage GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW FlushFileBuffers GetConsoleCP GetConsoleMode GetStringTypeW SetStdHandle SetFilePointerEx HeapSize HeapReAlloc WriteConsoleW DecodePointer

Name

.text

Size

249KB

Virtual Size

249KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

95KB

Virtual Size

94KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

14KB

Virtual Size

234KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

16KB

Virtual Size

16KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.gfids

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

512B

Virtual Size

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

512B

Virtual Size

480B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

3KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

discord-rpc.dll.exe

advapi32

kernel32

generic