Behavioral task
behavioral1
Sample
exn0 checker V2.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
exn0 checker V2.exe
Resource
win10v2004-20240709-en
General
-
Target
exn0 checker V2.exe
-
Size
78KB
-
MD5
45c38e3349a37dd1e5b7356bf9c2485b
-
SHA1
11d2cf42586ab912e95291fb864eb4438eb33b85
-
SHA256
ffd4bd9e263311f8efe8eb9158c7cc7e59a84ce844e91655cd2232c84be594f4
-
SHA512
21dc056f90f13ecdb00d06d6b301ef51ad468cbcbf89f6147a6163c5e53d34cab57d70fdce0ff6af5a5836c3e8ea567f4ee757813924bf04dc044b31ef3f68a4
-
SSDEEP
1536:92WjO8XeEXFh5P7v88wbjNrfxCXhRoKV6+V+43PIYi:9Zv5PDwbjNrmAE+4/IYi
Malware Config
Extracted
discordrat
-
discord_token
MTI1ODUxMDQ2NjE3MTQwODU0Ng.GmFXj3.Df8AN0DYd5vFnobuxLzbBh44NkKSu353OwSKTw
-
server_id
1262731677139210340
Signatures
-
Discordrat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource exn0 checker V2.exe
Files
-
exn0 checker V2.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ