Behavioral task
behavioral1
Sample
Fn test.exe
Resource
win10v2004-20231215-en
General
-
Target
Fn test.exe
-
Size
78KB
-
MD5
a5f44c4818410add3bacb43f081e5245
-
SHA1
689ab9943a809ee0a902bf165ad4369c9afb9ab4
-
SHA256
d5011659643cb871a6abd63b86bbae552a27ffa0f3b246f8a78619e90e8d29e9
-
SHA512
105663a6b65135ae99a79fdbce2f24442e6a4a3f3ee083f9fba84711b6fac9623eaef9b80d3e24dffa4cb03a4b66704874b17e5852d8fff183a7698c9a3d315f
-
SSDEEP
1536:52WjO8XeEXFh5P7v88wbjNrfxCXhRoKV6+V+DPIC:5Zv5PDwbjNrmAE+bIC
Malware Config
Extracted
discordrat
-
discord_token
MTE5MzY2OTQ2MTYwNjE0MjAyNw.Gv1OBL.ChvzuoqiAPydNBPZGONReJKsJAxa32eqoTEAjo
-
server_id
1193410665549922395
Signatures
-
Discordrat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Fn test.exe
Files
-
Fn test.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ