Behavioral task
behavioral1
Sample
FmGK3vMA.exe
Resource
win10-20240404-en
General
-
Target
FmGK3vMA.exe
-
Size
78KB
-
MD5
dc5f1fccad4fa6b8fb8840867fb985b5
-
SHA1
decc0e0c8d74c9e951d621a1cd567c706895af10
-
SHA256
8f7a75b9ed72bf95c31d73a4629ff6e3861e205d7ac2c16270c974cba91026b4
-
SHA512
00481b98282776f25048f0c65d79a9532059a4526f4789a2e079c20066d3bbe1f6dc6cf5d45de6e7e48f1e7e9b15b36775a2623ed117f27901c99b62d4e6cce3
-
SSDEEP
1536:52WjO8XeEXFh5P7v88wbjNrfxCXhRoKV6+V+5PIC:5Zv5PDwbjNrmAE+JIC
Malware Config
Extracted
discordrat
-
discord_token
MTI4OTU2Nzg1NDMyODI4NzM4Mw.GiEcx6.8LXjTQUC76tpQ1hPaelq3PbcPVWeHZCfxWaz5E
-
server_id
1289568050286432317
Signatures
-
Discordrat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource FmGK3vMA.exe
Files
-
FmGK3vMA.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ