Behavioral task
behavioral1
Sample
img/img_logger.exe
Resource
win11-20231215-en
General
-
Target
img.zip
-
Size
28KB
-
MD5
05374072590d3c6178664586a044d82f
-
SHA1
1666803825387455cf92bad4a065160088855758
-
SHA256
5691d9058848a4ec3954c86e164174c09503e854cc762125ba53226804de1ca7
-
SHA512
7cd047c7256bc0b3a83a1dfaba61a6b4daee464e54eba8c074da5b8d1d392a2f8f3d35ce29a95c87000dd828aa1e580ca7b9c467d1b78cb8d3368e6f016423c1
-
SSDEEP
768:m5lz6yZDgr9OtA8dozS9HvOJ43NGG58VBcr5E56:md2rCHH3NSfi526
Malware Config
Extracted
discordrat
-
discord_token
MTIwMDE5NDU1NDU2NjAxNzE3NA.GeH28B.0iURur47PAM6Lv2coTaMmhtDYuFoBAOb1coZaU
-
server_id
1199112144915013692
Signatures
-
Discordrat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/img/img_logger.exe
Files
-
img.zip.zip
-
img/img_logger.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ