Behavioral task
behavioral1
Sample
Client-built.exe
Resource
win10v2004-20241007-en
General
-
Target
Client-built.exe
-
Size
78KB
-
MD5
1a1c772c20188e54eb984376d9bfc326
-
SHA1
b2676e1e29c56beb1e9850b295ee815ce1b7ad5f
-
SHA256
fc6b001cdf8c0cf2b4908490b9012a6587d8f49ace47290d0ee8101714ad33a8
-
SHA512
7ce71429ccfbb02dfb910a37d419a0b591e0d03c760e6a1ea66ff21b57d25d6c7cbc637d4fa0e75d4723b871dd66e765ae7282ee9f2cf07c29ac2c0a715dc18c
-
SSDEEP
1536:52WjO8XeEXFh5P7v88wbjNrfxCXhRoKV6+V+zPIC:5Zv5PDwbjNrmAE+rIC
Malware Config
Extracted
discordrat
-
discord_token
MTMwMjI3NzQ1NTY0NTYzODY3MA.GfjUOj.StuF1g1Zby2hvqaUCbcO39m9M7sdS2BYcRDLlU
-
server_id
1302020284794142801
Signatures
-
Discordrat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource Client-built.exe
Files
-
Client-built.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ