Behavioral task
behavioral1
Sample
launcher by marcil.exe
Resource
win10-20240214-en
General
-
Target
launcher by marcil.zip
-
Size
28KB
-
MD5
044073bd18c83eca62a84fd4c81f1810
-
SHA1
fbefdb76e4d46305a04136f1b1b89f4a74284239
-
SHA256
9bf5206b9f32fb1333c61d972f0ba08e54d719d9daf28fee4ba3d5594bf254c4
-
SHA512
d128a69ea163329aeec54b6fa3348e642ee3401a8ee01adc854d5b5e22e209a402c69d4ef357505b769d312ef8cb5a2810d269fa64e7da46ee72f3145f8fdc6d
-
SSDEEP
768:T5lz6yZDgr9OtA8dozSqy0OaK1WxR89LOrwzxJ5yGE:Td2r8zZnWxELOEzZyGE
Malware Config
Extracted
discordrat
-
discord_token
MTIwMzY3OTkyNjUwNzY3NTY0OA.GjdRDd.ZIaxYZ2bWHinRD4srnJFASQz1j6RlarTZswSZA
-
server_id
1203680116169777192
Signatures
-
Discordrat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/launcher by marcil.exe
Files
-
launcher by marcil.zip.zip
-
launcher by marcil.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ