Suspicious
Suspect

fd2d28684e4435f3f89ae33953d2a48d

PE Executable
|
MD5: fd2d28684e4435f3f89ae33953d2a48d
|
Size: 80.38 KB
|
application/x-dosexec

Print
Summary by MalvaGPT
Characteristics

Symbol Obfuscation Score

Low

Hash
 Hash Value
MD5
fd2d28684e4435f3f89ae33953d2a48d
Sha1
f93449fb5fc3b27e20b8c50aa8fd98925f01ae0a
Sha256
82c6bfdb5ad897b4504f03ae4f66bdd0118626a5c79537b7e7cdea21796a38e6
Sha384
fcb84e4f63d174ec7bc25f794a3e76aa9d9970085d91c828e222f2965fc4540a89def4f5da9cd18520022aa10ae3523f
Sha512
cc439819d1ff75f87017a80e54772ba8461bc04995c1bf683f3a0c21a1789cbf17d63bdaaaa814d7fb92cad5707441c91e2755bd96e6519c434b84e01e9bfb0e
SSDeep
1536:52WjO8XeEXFh5P7v88wbjNrfxCXhRoKV6+V+/SPIC:5Zv5PDwbjNrmAE+/eIC
TLSH
0773B8C877AD8903FBBF5EBD147141524B72BB17E935F68D088C54E611B2B828C42B9B

PeID

Microsoft Visual C++ DLL
Microsoft Visual C++ v6.0
File Structure
fd2d28684e4435f3f89ae33953d2a48d
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rsrc
Resources
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
Informations
Name
 Value
Module Name

Discord rat.exe
Full Name

Discord rat.exe
EntryPoint

System.Void Discord_rat.Program::Main(System.String[])
Scope Name

Discord rat.exe
Scope Type

ModuleDef
Kind

Windows
Runtime Version

v4.0.30319
Tables Header Version

512
WinMD Version

<null>
Assembly Name

Discord rat
Assembly Version

1.0.0.0
Assembly Culture

<null>
Has PublicKey

False
PublicKey Token

<null>
Target Framework

.NETFramework,Version=v4.6.1
Total Strings

403
Main Method

System.Void Discord_rat.Program::Main(System.String[])
Main IL Instruction Count

6
Main IL

call System.Threading.Tasks.Task Discord_rat.Program::MainAsync() callvirt System.Runtime.CompilerServices.TaskAwaiter System.Threading.Tasks.Task::GetAwaiter() stloc.0 <null> ldloca.s V_0 call System.Void System.Runtime.CompilerServices.TaskAwaiter::GetResult() ret <null>
fd2d28684e4435f3f89ae33953d2a48d (80.38 KB)
An error has occurred. This application may no longer respond until reloaded. Reload 🗙