Behavioral task
behavioral1
Sample
Client-built.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
Client-built.exe
Resource
win10v2004-20231127-en
General
-
Target
Client-built.exe
-
Size
78KB
-
MD5
6494a3fbe37409e39f167f59f200650d
-
SHA1
797a02a24c2b54ca5de97d260e81a1b071a19088
-
SHA256
16029b6c800beab48c0e84eb69a3ebab92b975300d0f11a0eee31b868e28b14d
-
SHA512
83ff2793f808f159cf7bf0e486d88198a2cdc7921643c6a27ca3e28cfb0bfe9d2ed1811e2d6ad81819b9ab6790412b7f40a4a601caf23104f9324425012396a8
-
SSDEEP
1536:52WjO8XeEXFh5P7v88wbjNrfxCXhRoKV6+V+5PIC:5Zv5PDwbjNrmAE+JIC
Malware Config
Extracted
discordrat
-
discord_token
MTE4MzgzNzMxNzYwNjE2NjYwOA.GRN1R-.aO5fNKdRb_aWyfCpM8hlefyXbTdwmvkphIc31c
-
server_id
1127361679131426829
Signatures
-
Discordrat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Client-built.exe
Files
-
Client-built.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ