Behavioral task
behavioral1
Sample
Client-built.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
Client-built.exe
Resource
win10v2004-20230703-en
General
-
Target
Client-built.zip
-
Size
28KB
-
MD5
1438e9a00d7f189834b11d7ae55d7d60
-
SHA1
dd74ad8cab26121e3646d73f45fd792cfc07ad34
-
SHA256
5ddf4aebec292e0af74bc3f2abc0839b30adb2f4c13144fd0f6b904a06f346aa
-
SHA512
27036254fa467aef58258c2c1f0b6ead5f819a5fbc1029b73ad51a83215c28300448b41270bfcdd8257d4d05a8501bd7ff0c6b303b6f80dd5951a5e52973a566
-
SSDEEP
768:C+5lz6yZDgr9OtA8dozi25tT7VPVAcqKv:Nd2rk25ZAcqq
Malware Config
Extracted
discordrat
-
discord_token
MTE0MTI1Mzg2MDA5OTM1ODc1MA.GwyOXH._I3au6soC6wphOsIpRzBiMY97PX79_DV1JZyTE
-
server_id
1128551821342949437
Signatures
-
Discordrat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Client-built.exe
Files
-
Client-built.zip.zip
-
Client-built.exe.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ