Behavioral task
behavioral1
Sample
Vatex External.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
Vatex External.exe
Resource
win10v2004-20231215-en
General
-
Target
Vatex External.exe
-
Size
78KB
-
MD5
7dd32736bbe4c08754801fa9e35ed0f0
-
SHA1
16a6d0eb9132da47c4b0f6e10bc80d469a2acc9b
-
SHA256
54e5e2ecb39e6c09a958c76b26753c0a45ece69c050c23d236c0e780b5e3b425
-
SHA512
59eb26562a91f728fb62fdc5a70fe2b5ee5c491ef7940c38b7c5fe6f7cffc53096ee8791b117ec5d0b7af2b1fd598630eb3ab932214b52da00ab026f0cf8af24
-
SSDEEP
1536:52WjO8XeEXFh5P7v88wbjNrfxCXhRoKV6+V+6PIC:5Zv5PDwbjNrmAE+mIC
Malware Config
Extracted
discordrat
-
discord_token
MTE4NzkwMTk0MzE0MjY5MDgzNg.GE8Lb6.RolmDoCGixSC5Big-Tt15NZiQLT2aDrmMcqP5A
-
server_id
1187902344977981503
Signatures
-
Discordrat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Vatex External.exe
Files
-
Vatex External.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ