Behavioral task
behavioral1
Sample
Client-built.exe
Resource
win11-20241007-en
General
-
Target
Client-built.exe
-
Size
78KB
-
MD5
8500fa817aaf7bd8f5dcfbdd4349113c
-
SHA1
adf69021bccf0b921054733e150a50d6ceddcf38
-
SHA256
3646da9cc1bc925b19c4201d42dffe7b081b6ef669df4640afe6906b75255e97
-
SHA512
d06dcee6600cbaf568816f63dc33d05e35309a5ef5a2bb3628191db7a86890720aeda79e3b50bb2a7fc0ce050730a0d154d9fe849ec98303e4d483f3edd11d44
-
SSDEEP
1536:52WjO8XeEXFh5P7v88wbjNrfxCXhRoKV6+V+oPIC:5Zv5PDwbjNrmAE+sIC
Malware Config
Extracted
discordrat
-
discord_token
MTI5NzAyNTkxODU0Nzc5MTk1Mw.GCZwQh.vmOtb2lv8_CvB7LE33XNynsJYJxp3cni1mBINY
-
server_id
1297025877313585163
Signatures
-
Discordrat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource Client-built.exe
Files
-
Client-built.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ