Behavioral task
behavioral1
Sample
Tweaks Manager.exe
Resource
win10v2004-20231215-en
General
-
Target
Tweaks Manager.exe
-
Size
274KB
-
MD5
400efb39b7ddb5db63ea87d281f151b9
-
SHA1
4b651ff76d39847ad219e94353100636dde72a8f
-
SHA256
8635dcb0b463f3e2c2c4642efcc19d63011e1b9dec62040c70bf709ba5568d70
-
SHA512
fa62b92a40d7e8d55cb52c96987006c12489f56fdd5a422d2081cb3bc9f0b54eccf556fb364841aa8ecd2f9fd591b1f2e48196c504e6aae0258d71bd10dc06a1
-
SSDEEP
3072:4Zv5PDwbjNrmAE+SITuRuuuujHeF5mbRXDntusG4TNX8Hx6Jfkj5MWIkXq:8v5PDwbBreIWaqxusGGNX8Hx6hkj5Yk6
Malware Config
Extracted
discordrat
-
discord_token
MTE4ODMwMDU5MTc4OTc2ODczNA.G0Vzr4.sBsYKRVI_rDFF9BnzK9aSDvZsiRnr9eZGrgDdo
-
server_id
1188300133297819648
Signatures
-
Discordrat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Tweaks Manager.exe
Files
-
Tweaks Manager.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 197KB - Virtual size: 196KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ