General
-
Target
Gta6.exe
-
Size
78KB
-
MD5
824a251e31457456434aee4e526d4d97
-
SHA1
0bbd99b6ce556f9ff9049818f16c48ee280b6b0a
-
SHA256
2ca255cfb347ed8c5338f6409515be7c017f8086cce03239aa0d835a9e112564
-
SHA512
7d1e47e7f0a223bb018d75386bd17448f3d579b5cf817cf24fd1e0b4803170ac8e8c593f71b8443f92bb73d2fcc8de44218b19ba066af6044c7145924ab8ee81
-
SSDEEP
1536:v7Va/sfO8XReVMPFSIkptD9bwNrfxCXhRoKV6+V+n+k:v7OsEWNg9bwNrmAE++k
Malware Config
Extracted
discordrat
-
discord_token
MTIwMTg4NzE3NjQ1MTk1MjY3MA.GxeJ2b.KbXZ-Omh2iJG5BgGJ38cdMBjI7NKXSYqSBHsCI
-
server_id
1201887775536988170
Signatures
-
Discordrat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Gta6.exe
Files
-
Gta6.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ