Behavioral task
behavioral1
Sample
test.exe
Resource
win10v2004-20231023-en
General
-
Target
test.exe
-
Size
78KB
-
MD5
46d8abb628b3ddabd60d970275eb9009
-
SHA1
aeafae2c8e242f91327fc575b1ee1dd96e349a1d
-
SHA256
468e901bc369d5128bd0ef7c031b7e047c9fa00e0f03ef1ae8b76ebd6c03e34c
-
SHA512
7273c9cbc191c5d70b47c4a03fffcf0ad011c0220c1e7617694a6a42e3bb4e693ab80665fd31ffa54c2487e9fbc6300008b2a567a33e6c59a3f5984e45504c95
-
SSDEEP
1536:52WjO8XeEXFh5P7v88wbjNrfxCXhRoKV6+V+hPIC:5Zv5PDwbjNrmAE+xIC
Malware Config
Extracted
discordrat
-
discord_token
MTE2ODM1MzgyNDc1OTYxOTcxNg.GbzxQc.FEsKq_8Z4HusRFQbKRF1JoC91TtF1DepOC9VFI
-
server_id
1168354244890480820
Signatures
-
Discordrat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource test.exe
Files
-
test.exe.exe windows:4 windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ