Behavioral task
behavioral1
Sample
Client-built.exe
Resource
win10-20231023-en
General
-
Target
Client-built.exe
-
Size
78KB
-
MD5
bd7bf6037fe00c710130f0a3d50ad0ee
-
SHA1
a4aa0bbaa23ab6674a2114321b2afb0c34fe8408
-
SHA256
5de915acfc73492235875743d672991faa7d8d3d1e55652e9ceb7a763862402d
-
SHA512
558a0a5a2f936835e4ffd3a9e58542371fc8e6b26836516381c14533578f431de7733f4afaf1b4ccfd4eaa35547682b77a2735695153d9af345b6eabb18dd003
-
SSDEEP
1536:52WjO8XeEXFh5P7v88wbjNrfxCXhRoKV6+V+yPIC:5Zv5PDwbjNrmAE++IC
Malware Config
Extracted
discordrat
-
discord_token
MTE3NTEyNTM1NjQ5MjA5OTY5NA.G8dIow.y3uaekjfnECYi9l-DAu7YOa60zFl0f1NhH0FKs
-
server_id
1174667643995824198
Signatures
-
Discordrat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Client-built.exe
Files
-
Client-built.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ