Behavioral task
behavioral1
Sample
Info_2.0.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
Info_2.0.exe
Resource
win10v2004-20240221-en
General
-
Target
Info_2.0.exe
-
Size
78KB
-
MD5
a09754aaa72c6a22ab68b2dd55b2f6b5
-
SHA1
3ad597a0417a80981aefef93eab0edf63ecb3e48
-
SHA256
ac41c286ebf5334f779673be26eeef81e2ff616e07deebc7a276cc6532469526
-
SHA512
282fdb6891475203b436c35b0eda5602a9e8f8ec49335f88974ad9e959d5e2e24c7e117e3d614fc79b62e626e3d0a43899d0fe2b6ea24498372567257f5d3e9f
-
SSDEEP
1536:52WjO8XeEXFh5P7v88wbjNrfxCXhRoKV6+V+cPIC:5Zv5PDwbjNrmAE+QIC
Malware Config
Extracted
discordrat
-
discord_token
MTIxMDgxNTkxMzcyNTc5NjM4Mw.G2d-ZZ.T2zCaZmaKz1r96SYjQQqYMgSkg3tF-oAtGYh1M
-
server_id
1210816339246194798
Signatures
-
Discordrat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Info_2.0.exe
Files
-
Info_2.0.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ