Behavioral task
behavioral1
Sample
3452a8da597975fc6a00c06c5106f009.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
3452a8da597975fc6a00c06c5106f009.exe
Resource
win10v2004-20240611-en
General
-
Target
3452a8da597975fc6a00c06c5106f009.bin
-
Size
78KB
-
MD5
3452a8da597975fc6a00c06c5106f009
-
SHA1
4e5118042d641d12c0f6fc42a6eaeb86aed43fb6
-
SHA256
998be75a886cb45442cd31c27a72558459540f05d588961a67515ca98049f4d2
-
SHA512
b3e0f6d7ad90c4e60389594a35e7592bd651d544f68fc0f232c671d6da70f219176113ff031608a8c49e9c897898aaa9ccb485d1ba1f97180adfe44f0fbb41ba
-
SSDEEP
1536:52WjO8XeEXFh5P7v88wbjNrfxCXhRoKV6+V+jPIC:5Zv5PDwbjNrmAE+7IC
Malware Config
Extracted
discordrat
-
discord_token
MTI1NjY2NjMwMTQ4NTU1MTY5OA.GJPfoK.e4hSv7hek2RkFivU556o2-E78FxjuV2jTYvdLk
-
server_id
1256574491014725675
Signatures
-
Discordrat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3452a8da597975fc6a00c06c5106f009.bin
Files
-
3452a8da597975fc6a00c06c5106f009.bin.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ