Behavioral task
behavioral1
Sample
My game made by nasreddine.exe
Resource
win11-20241007-en
General
-
Target
My game made by nasreddine.exe
-
Size
78KB
-
MD5
085c51f127d861ccaf2f8c1ff9ba776d
-
SHA1
2d8c168e37227e439607933d77a6a2b67c20015c
-
SHA256
13136b162994947da3988677ec3ede35502b5fbbc24c64bad17207e27bea793a
-
SHA512
7ddf4ed2c15a344a338e4e917e26ccd19484993c7b3e732608ecd0add824374ad07437390e67fa1f2c937682f95bb4a375a7ae116d67301ca0a67affca073340
-
SSDEEP
1536:52WjO8XeEXFh5P7v88wbjNrfxCXhRoKV6+V+YCPIC:5Zv5PDwbjNrmAE+YuIC
Malware Config
Extracted
discordrat
-
discord_token
MTI5OTg0MDI4MDU4MDg1MzgwMA.Gf6QvR.CAidEfh94jI3_WUoDi6d2AQm1kPZvNug7mCP-0
-
server_id
1299838981277745224
Signatures
-
Discordrat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource My game made by nasreddine.exe
Files
-
My game made by nasreddine.exe.exe windows:4 windows x64 arch:x64
Password: ..
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ