Behavioral task
behavioral1
Sample
Client-built.exe
Resource
win11-20240709-en
General
-
Target
Client-built.exe
-
Size
78KB
-
MD5
7a00b5c817dd0b9474f4d240bcd31f43
-
SHA1
634b7287387198ed5a17b7871f4a997d70d0d11a
-
SHA256
8a1133fca1b901fcfc30def8281195377e0ca6b9aa3aea6761d3052bd158a8dd
-
SHA512
7266e58798bd41c996bf44ea1be451a35104d93a8394c10c50fa112f4842de24dccca989e04014d0e006212dd1f95bf91cf6691e8a54ec03aaae8b8300509f7f
-
SSDEEP
1536:52WjO8XeEXFh5P7v88wbjNrfxCXhRoKV6+V+zPIC:5Zv5PDwbjNrmAE+rIC
Malware Config
Extracted
discordrat
-
discord_token
MTIzMDUyMTczMDAyODUzNTg5OA.GXsfBL.GL3qISVGeFab0vYpCvUtoH7bg9zhMan1d7KAis
-
server_id
1262688535409070121
Signatures
-
Discordrat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Client-built.exe
Files
-
Client-built.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ