D:\discordrat\Discord rat\obj\Release\RCCService.pdb
Static task
static1
Behavioral task
behavioral1
Sample
RCCService.exe
Resource
win10v2004-20240704-en
General
-
Target
RCCService.exe
-
Size
5.2MB
-
MD5
80d98f8a695a302c7b803fb649fc5013
-
SHA1
32cb9b34476c808af663ceab3193d868ba34ec20
-
SHA256
a68b69a59eaf40e32ead156cf7692af873e05343dd7d1f637146d0bea703931e
-
SHA512
30e4f74bcae247595c369efefa7ee979f43413e1b6f3828d8d207166f4c60108becd6775d81af44c9a697ebc5a8d44829e1b7930d4e8b3f8731d19f46dd1c496
-
SSDEEP
98304:bQ9rjjcAka3x9vgdHHSmnFFSaxhsHHF/81eNApeap+/SX/b1/GmOPL:0aAz3x9OjnFFSaxgHedtp+6xQPL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource RCCService.exe
Files
-
RCCService.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Sections
.text Size: 5.2MB - Virtual size: 5.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ