Behavioral task
behavioral1
Sample
Spoof.exe
Resource
win10-20240404-en
Behavioral task
behavioral2
Sample
Spoof.exe
Resource
win7-20240708-en
Behavioral task
behavioral3
Sample
Spoof.exe
Resource
win10v2004-20240709-en
Behavioral task
behavioral4
Sample
Spoof.exe
Resource
win11-20240709-en
General
-
Target
Spoof.exe
-
Size
78KB
-
MD5
76a1b0dc7b01f3dfa44c1b413d1296f2
-
SHA1
e4275d58a76b2af020e481841c820f8ecdfca3d9
-
SHA256
40df802ea915c8e8512b89ab2a679abd989cafc5b790dcf2f477aef02e73b5a8
-
SHA512
1462f6b854315afd5b476f3dcdde99a35a3e628fe4d87a793888dcadc181abc269b926a77d98dbecfb3cc700e351a065cc9ac36522e39611bb7618ba395c18e5
-
SSDEEP
1536:52WjO8XeEXFh5P7v88wbjNrfxCXhRoKV6+V+7PIC:5Zv5PDwbjNrmAE+zIC
Malware Config
Extracted
discordrat
-
discord_token
MTI2MTA3ODI5MTM4OTg3NDI5OA.G3D8Qc.joy_5q4IR_-dLRqBD8D-WZx-8MohCtmgu7lxyo
-
server_id
1261065603079471246
Signatures
-
Discordrat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Spoof.exe
Files
-
Spoof.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ