Behavioral task
behavioral1
Sample
Client-built.exe
Resource
win11-20240412-en
General
-
Target
Client-built.exe
-
Size
156KB
-
MD5
ac65982422f26dbbecc8ef1ed6eb1191
-
SHA1
f03c3cbbc1cb4eddb161e223529c81f51c8bdde0
-
SHA256
795c769ab8644ec57a4a3603aca48e91e42841dd36cfea9cd692e1afa29972d5
-
SHA512
e8aa0fddf4e310038e6068b4b16e5a170284b0e64987e387421fb28050e36d9a5802f2f8c9a95eb5b463b16429718c1d574ec1997894a4ee64fa49fdee47fb56
-
SSDEEP
3072:ZZv5PDwbjNrmAE+CIZPXQL14x8rVlq+hQCS895:/v5PDwbBruIVXwNQCR
Malware Config
Extracted
discordrat
-
discord_token
MTIyOTkzMzQ1Njc2NzU4NjMxNQ.GA8lvX.p2sO85UW28jqHfp9V6UnNZYpTZjcyonJ3PZ21I
-
server_id
1211176359427313724
Signatures
-
Discordrat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Client-built.exe
Files
-
Client-built.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 79KB - Virtual size: 79KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ