Behavioral task
behavioral1
Sample
TGX.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
TGX.exe
Resource
win10v2004-20231020-en
General
-
Target
TGX.exe
-
Size
78KB
-
MD5
1e3c438a82a31d818fad3606215dc23a
-
SHA1
0e4a7e5ca2966787e7bd8ab8ecda3d44ff8292fa
-
SHA256
bd5ecc8ab67d0c02bb5eea5f8b7d63dbcb42ff8ccf742d94da922b50093c8115
-
SHA512
aca03a90eb41652075d8bad1c9c3c405efaf3590ba5bdaecbe6453e6481d9c78b2582c344e86f3ea3539fdd805455c69a5c9c8b6a5fbb28e994df7495032bc82
-
SSDEEP
1536:P2WjO8XeEXFV5P7v88wbjNrfxCXhRoKV6+V+zPIC:PZ75PDwbjNrmAE+rIC
Malware Config
Extracted
discordrat
-
discord_token
MTE2ODM1MzgyNDc1OTYxOTcxNg.GuCBPV.iHyRCudnUUbr-EN6gXf0RcnWLVRwzYnh-dQ6Eo
-
server_id
1168354244890480820
Signatures
-
Discordrat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource TGX.exe
Files
-
TGX.exe.exe windows:4 windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ