Behavioral task
behavioral1
Sample
Builder.exe
Resource
win10-20231215-en
General
-
Target
Builder.exe
-
Size
78KB
-
MD5
e89a03eefe8ebaae5998ff0736764552
-
SHA1
197cfc1f66eeb04ceb32d937df9f1b3237dfe975
-
SHA256
07437d5479dc996562aa83786e87cdeca8e8db845eed9a0744dd7b99bf23ea7b
-
SHA512
5e7964a1f871b133f98b06c670007ff88dccb253ed1801cad2825522e71c667c80fda85f806ad0759fbf78c948efc217bbf00bdf1a93340a14deabd37c5ef21b
-
SSDEEP
1536:52WjO8XeEXFh5P7v88wbjNrfxCXhRoKV6+V+9PIM:5Zv5PDwbjNrmAE+tIM
Malware Config
Extracted
discordrat
-
discord_token
MTE5Mzg0MDE2Mzk5OTIwMzQxOQ.G6Zhpb.kr0g4Jnzb4-HT1taNIi1Evi891X9RhRfbv5fj8
-
server_id
1188842999233380363
Signatures
-
Discordrat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Builder.exe
Files
-
Builder.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ