General
-
Target
Client-built.exe
-
Size
78KB
-
MD5
2238fc4fe8f9eb5ffcc8fa8dec62dadf
-
SHA1
3d6295ff32e46f30ef622712425b137f4ce2eb74
-
SHA256
d8ffc6413c70ffe41e139831048ba6f7a5f65d9cc88ae40df0a108cb2120b285
-
SHA512
f867008b82b7737b1cfdf60b34d27a599c68b68410de32189c162140bf6241419dd21f59eed5185e4ae5ce9b6e7cd778208d678a6ad384aa21326510c1d77d5d
-
SSDEEP
1536:W2WjO8XeEXFd5P7v88wbjNrfxCXhRoKV6+V+2PIC:WZD5PDwbjNrmAE+yIC
Malware Config
Extracted
discordrat
-
discord_token
MTIzMTI2Njc3Nzg2NzIyMzA3MQ.G_NCCd.gkqWV7Cfb5S4KMAFj-HUcjqHbunJtCc1BjG7Uo
-
server_id
https://discord.com/oauth2/authorize?client_id=1231266777867223071&permissions=8&scope=bot
Signatures
-
Discordrat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Client-built.exe
Files
-
Client-built.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ