Suspicious
Suspect

Share on LinkedIn
Print
PE Executable
MD5: 2f57c4da2de768e61147fdc357855a21
Size: 6.76 MB
application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 2f57c4da2de768e61147fdc357855a21
Sha1 d34773afa2b30840947fbe075f5ed9dd9b2fad20
Sha256 4d5f3690cdff840ceba70c1b1630ceadd0d3dcf23c8e0add0257cba2f166f5e6
Sha384 cc1f11ef7117625545e64f5c10e5811604cd874cd9b0ff4b8c06d6984f61895fa8c1d1b174646ff98f6837cf26444d86
Sha512 27f68e8f64eb1759447dcd8dc5dab657f7ffa6aede9d6e874576efa554a6271f3c498196f904642ebf8bfa496b33023a41c68e772861712f3dd72919b35d97f0
SSDeep 49152:1IJixbKNhhwH+ZxIl3cj3+g4UwZL+ms/H8ukwzhpYpx5jHzGalNm0pFx0E+Tni4U:1IbPlX/c8YFCoCKMBn+/+8pl
TLSH F0664A17F26284E8C56AC074836A6232FA31BC8D47347AFB57D09B212F65BD06B3DB54
PeID
Microsoft Visual C++ 8.0Microsoft Visual C++ 8.0 (DLL)Microsoft Visual C++ v6.0 DLL
[Authenticode]_d33625cc.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.rsrc
.reloc
Resources
RT_ICON
ID:0001
ID:0
ID:0002
ID:0
ID:0003
ID:0
ID:0004
ID:0
ID:0005
ID:0
ID:0006
ID:0
ID:0007
ID:0
ID:0008
ID:0
ID:0009
ID:0
ID:000A
ID:0
RT_GROUP_CURSOR4
ID:0001
ID:0
RT_VERSION
ID:0001
ID:0
Name Value
Info
PE Detect: PeReader OK (file layout)
Info
Authenticode present at 0x670800 size 7648 bytes
Info
PDB Path: discord_control.pdb
An error has occurred. This application may no longer respond until reloaded. Reload 🗙