Behavioral task
behavioral1
Sample
FeatherB/FeatherBootstrapper.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
FeatherB/FeatherBootstrapper.exe
Resource
win10v2004-20240709-en
General
-
Target
FeatherB.zip
-
Size
28KB
-
MD5
809e87f2d2472def3836f3e31a26701f
-
SHA1
fc1ff2bff3e0c2aacfa2be0cc17ba4bd20f40126
-
SHA256
1ad5599d212ff553f0751bb096c25e3cdb89b5e938e963851c7ca6dd4135476c
-
SHA512
29c216e8f58e93eaecb80415f5f43407094839702b8f1c907ce67d3bb0e00572409007ab0a4b694187e47edb927ccc6262cfea15010f1ab151e190da9c66a3d2
-
SSDEEP
768:25lz6yZDgr9OtA8dozJxem/jKjkrAKJ8VR44e:2d2rgmrL09re
Malware Config
Extracted
discordrat
-
discord_token
MTI2Mjc3ODU4MTgxNDIxNDc3Ng.GoRPys._68wmafo5T8UikhKXH678wKMr5nwbtLkTb_XXI
-
server_id
1262984138315530440
Signatures
-
Discordrat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/FeatherB/FeatherBootstrapper.exe
Files
-
FeatherB.zip.zip
-
FeatherB/FeatherBootstrapper.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ