Discord[.]Debloat[.]v2[.]1[.]exe

General

Target
Discord.Debloat.v2.1.exe
Size 280KB
Sample261024-bphqms1ydx
SHA256 020c7956eef9f12c3e09fe3a71237e038136f47ae22548153457fc71bead6ee3
MD5 7311372564d81dd842db4bdab41fa5d7
SHA1 5a49329ca1490ebef230d5fff24391b3b148a6a0
SHA512 72d411b36de4389c2ff89d228a7c1dff399cd87eb4582a21c35611c11440b3747edaa549885f3e6005c28a37377f0213d3ee989e1da101df7d7623254ad53dd9
SSDEEP 6144:VlMeBzQ92kY15q1slwZx5GTWpdL8TgCNhfUQV:YeB395q1MuyW/8ThfU
TLSH
T1C25402AB7B23DBD0C5293630E58B05FC97126D110AE3C7A7E0D43E6E2ABEB48D556113
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

upx

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Discord.Debloat.v2.1.exe

SHA256 020c7956eef9f12c3e09fe3a71237e038136f47ae22548153457fc71bead6ee3
MD5 7311372564d81dd842db4bdab41fa5d7
SHA1 5a49329ca1490ebef230d5fff24391b3b148a6a0
SHA512 72d411b36de4389c2ff89d228a7c1dff399cd87eb4582a21c35611c11440b3747edaa549885f3e6005c28a37377f0213d3ee989e1da101df7d7623254ad53dd9
SSDEEP 6144:VlMeBzQ92kY15q1slwZx5GTWpdL8TgCNhfUQV:YeB395q1MuyW/8ThfU
TLSH
T1C25402AB7B23DBD0C5293630E58B05FC97126D110AE3C7A7E0D43E6E2ABEB48D556113
MD5 SHA1 SHA512 SSDEEP TLSH

UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

378176

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths