Behavioral task
behavioral1
Sample
Client-built.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
Client-built.exe
Resource
win10v2004-20230703-en
General
-
Target
Client-built.exe
-
Size
78KB
-
MD5
5d4ecc04699b465ae427afd54c505ca1
-
SHA1
0387b9ca0e64b98c6f44dc7337dfbdea04ac613f
-
SHA256
3d5fc1a9a4a6881436fe33c343a8eca90b49bf5d5596d5c05a80994ae57f8303
-
SHA512
3e8c560873338442ca6705695de22980d1f7b1e11bfcc97403500ad2651fef0538afdc91de5ad769c14f36ec68647f4854155a0a40aaaaa0605f44f520b7d66f
-
SSDEEP
1536:52WjO8XeEXFh5P7v88wbjNrfxCXhRoKV6+V+dPIC:5Zv5PDwbjNrmAE+NIC
Malware Config
Extracted
discordrat
-
discord_token
MTEzNDk1NTg0OTI2NjIzNzQ5MA.GG8rwj.ip11YcLYtPtbH-viaDY6tZPxX_5xtRM39e6pBQ
-
server_id
1134956707169185803
Signatures
-
Discordrat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Client-built.exe
Files
-
Client-built.exe.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ