zapret-discord[.]exe

General

Target
zapret-discord.exe
Size 7.1MB
Sample261024-nt46nahw4x
SHA256 8ae4130ad94c43368f5c12017fa606abe98d2231b7ef6ec37563b061895f6703
MD5 608ac71eb6c145880a91731acbb0279d
SHA1 e427484696d340c2d9a3a5802d51a155e0748aea
SHA512 16a757d8798297448fb98c20745c292b54736e4048541193622e79078c6d981d83a7868b2aff3a3f6dcce60a26079644bb6f7f509a69647d4e32551a5387b5e7
SSDEEP 98304:kr6UauwOJKSCJ9+7/JKYq8VIKPxkRwYFoPZEJVt:Sa1qKS60VEo4wiCaV
TLSH
T15676E121BE43B771D40395355A26903BE762E9482F35C6A3F9CC7269F3732B84A356C2
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
zapret-discord.exe

File Explorer

zapret-discord.exe

.exe 7.1MB

zapret-discord.exe

SHA256 8ae4130ad94c43368f5c12017fa606abe98d2231b7ef6ec37563b061895f6703
MD5 608ac71eb6c145880a91731acbb0279d
SHA1 e427484696d340c2d9a3a5802d51a155e0748aea
SHA512 16a757d8798297448fb98c20745c292b54736e4048541193622e79078c6d981d83a7868b2aff3a3f6dcce60a26079644bb6f7f509a69647d4e32551a5387b5e7
SSDEEP 98304:kr6UauwOJKSCJ9+7/JKYq8VIKPxkRwYFoPZEJVt:Sa1qKS60VEo4wiCaV
TLSH
T15676E121BE43B771D40395355A26903BE762E9482F35C6A3F9CC7269F3732B84A356C2
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

6

Entry point

398752

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

Name

.text

Size

648KB

Virtual Size

647KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

640KB

Virtual Size

639KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

5.8MB

Virtual Size

6.1MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

35KB

Virtual Size

34KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.symtab

Size

512B

Virtual Size

4B

Characteristics

IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.rsrc

Size

3KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

File Explorer

zapret-discord.exe

generic