Behavioral task
behavioral1
Sample
downloaded_picture.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
downloaded_picture.exe
Resource
win10v2004-20240221-en
General
-
Target
downloaded_picture.exe
-
Size
78KB
-
MD5
9237c604551c7652857f255e97afef70
-
SHA1
7d634f174035a8be527cbd5d2244bff087d5fb53
-
SHA256
4fa14fa12b0ff5d2c282ce98c9237209625c13c70add2f799ff4fc060f31ab3a
-
SHA512
aa8c7bc9fb4fc6b9c2488514638186e71e89ecaf0c157912f3bb1d93bc1b32f07c080f290715533ee7b4919e1ee51d5f1a7432883ad2964ab64ee60d36e6bb30
-
SSDEEP
1536:52WjO8XeEXFh5P7v88wbjNrfxCXhRoKV6+V+aPIC:5Zv5PDwbjNrmAE+GIC
Malware Config
Extracted
discordrat
-
discord_token
MTIwNjA5MjI4NDQ4NDEyODc5OA.Gc_S8D.QLP5cWNDPuUj1lT4V0SsF-nXF5OqWbHGuS1CBI
-
server_id
1209045514025181224
Signatures
-
Discordrat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource downloaded_picture.exe
Files
-
downloaded_picture.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ