Discospinsterium.exe-skidded-main.zip
- SHA256 d0ae6be54a926ba49ffc5d47dbd297e16c0ed8a48e1684151a39308bb816d382
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Discospinsterium.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
Discospinsterium.exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
7 signatures
150 seconds
General
- Target Discospinsterium.exe-skidded-main.zip
- Size 79KB
- Sample261024-cjsjbsww3r
- SHA256 d0ae6be54a926ba49ffc5d47dbd297e16c0ed8a48e1684151a39308bb816d382
- MD5 16d249457181b57c50f50ea99c2bc779
- SHA1 0a3ef9bd83e2159551f991ad7dc4f9b375217392
- SHA512 0f08cd2f4919b8aac2e05894ccb42f2bbb3cac2a255af8a578378be1a62501fc605de5fa02f2b80594b03e90e35d1192c446c7030f28d557383c5318510aa2a8
- SSDEEP 1536:DF8Fubwfmwfpr0IvagyPYXhRZpeak2ZSDXHoCfFFxQDbQTFGM9ME337YQdd1:DYahwfB0IvcPYXhTZkiRCXxQnhDE3Emb
- TLSH T11583024AE6414DE3C1DC38E8076FEE955BE1E5766C4830769CCD0294B2EE6221DCEB38
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack002/Discospinsterium.exe
File Explorer
-
Discospinsterium.exe-skidded-main.zip.zip 79KB
-
Discospinsterium.exe-skidded-main/Discospinsterium.zip.zip 78KB
-
Discospinsterium.exe.exe 149KB
-
Discospinsterium.exe-skidded-main/README.md79B
Discospinsterium.exe-skidded-main/Discospinsterium.zip
- SHA256 95df56e281650da173bcbe0bf01828db9d72c0dee9a4655333f03e34376f409a
- MD5 213135a53e601f98c7662c0a1634ba74
- SHA1 16113bfc653c6753021828b496e8cb42b4c7fd5c
- SHA512 6a65317d8bb7379a3f6fa70ff5f2d7382881b155fe28e0c9b77d7fabf46780d889ca01292468f4a6aa85abc60e9c551206ce47fd1e21dae0bbae2e0f1f3c915d
- SSDEEP 1536:jF8FubwfmwfXr0IvagyPYX/RZpeak2ZSDXHoCLFFxQDbQTMQc0tAZRHST:jYahwf70IvcPYX/TZkiRCbxQn2c0tAZS
- TLSH T117730289BA904DF786EC78D40E2B9FD58BD1C9365D08207EAC8D029C75FA91138CEB59
- MD5 SHA1 SHA512 SSDEEP TLSH
Discospinsterium.exe
- IMPHASH 85ce7bf64486dea2b5cfb5b25aa46228
- SHA256 f03fbb2c071268b11ca7f4d54375e1ecbb9d3c44a5d97c110bfc721b5fdf0bcf
- MD5 c8f96822452c1b5270b097f6766f450b
- SHA1 1c7208fb214dd4c7e5b97c4d20a26ed27aff77a5
- SHA512 d1bb0df82a4980706df2d0d3b1cf4439548eebd3f1646ea417fb7017009f7987d43d66bf7039b7852ea17bbb59c51c9a8544a7aac9b65bc4f979a35b27917a39
- SSDEEP 3072:PS7BVFEKKKTwiGVs65oBqsNjIqRyi5K1LwhVbxsNVbHT3k:ixKmGPCBBOqBKShrOdT3
- TLSH T1A7E37C1574C085B2E6BB19354860EBB19E3EF9710F619DAF2384167E4F242D38D36E2B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
20331
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
C:\Users\Senad\source\repos\fauxinity\Release\fauxinity.pdb
kernel32
GetProcessHeap
HeapSize
HeapReAlloc
FlushFileBuffers
GetConsoleOutputCP
GetConsoleMode
SetFilePointerEx
WriteConsoleW
GetTickCount
ExitProcess
CreateThread
CloseHandle
TerminateThread
Sleep
CreateFileW
VirtualAlloc
GetStringTypeW
WriteFile
GetFileType
SetStdHandle
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
WideCharToMultiByte
MultiByteToWideChar
GetCommandLineW
GetCommandLineA
GetCPInfo
GetOEMCP
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
RtlUnwind
RaiseException
GetLastError
SetLastError
EncodePointer
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
GetStdHandle
GetModuleFileNameW
GetModuleHandleExW
HeapFree
WaitForSingleObject
GetExitCodeProcess
CreateProcessW
GetFileAttributesExW
CompareStringW
LCMapStringW
HeapAlloc
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
DecodePointer
user32
ReleaseDC
InvalidateRect
GetDesktopWindow
DrawIconEx
LoadCursorW
LoadIconW
DrawIcon
GetSystemMetrics
GetWindowRect
GetDC
MessageBoxW
gdi32
BitBlt
CreateCompatibleBitmap
CreateFontA
SelectObject
CreateDIBSection
CreateCompatibleDC
StretchBlt
PlgBlt
GetBitmapBits
DeleteDC
SetTextColor
TextOutA
SetBitmapBits
SetBkMode
SelectClipRgn
Polygon
DeleteObject
CreateSolidBrush
CreateEllipticRgn
CreateBitmap
winmm
waveOutPrepareHeader
waveOutOpen
waveOutClose
waveOutUnprepareHeader
waveOutWrite
msimg32
GradientFill
ntdll
RtlAdjustPrivilege
NtRaiseHardError
Name
.text
Size
75KB
Virtual Size
75KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
62KB
Virtual Size
62KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
2KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
5KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=18, id=259, version=29395,
count=153, id=261, version=29395,
count=21, id=260, version=29395,
count=42, id=261, version=31823,
count=18, id=260, version=31823,
count=21, id=259, version=31823,
count=13, id=257, version=29395,
count=128, id=1, productName=Unmarked objects,
count=1, id=265, version=31937,
count=1, id=255, version=31937,
count=1, id=151,
count=1, id=258, version=31937,
Discospinsterium.exe-skidded-main/README.md
- SHA256 7e5233e0e5b5d17cad30f40822f8d2a2158bac9f02ffb535ddd3ae9d399dbf4f
- MD5 11fabb5a6925198532866995f4e87c73
- SHA1 1c0c0d669a9497221f0b057e6902c7c4dfdcedbf
- SHA512 1509fc8453bb7c9ee74898a2b9cb108cbc57c95499a1f275e598213efa6b9f2c87332b92f798595cff46022593b2dbd42e5e6c8c5a3a8ce84d1f70cc382b8935
- TLSH T186A0121861370445269072490036E848BC0A2602566409004435985C36006004264021
- MD5 SHA1 SHA512 TLSH