Behavioral task
behavioral1
Sample
Megami Bootstrapper/Megami Tensai/Bootstrapper.exe
Resource
win7-20241023-en
Behavioral task
behavioral2
Sample
Megami Bootstrapper/Megami Tensai/Bootstrapper.exe
Resource
win10v2004-20241007-en
General
-
Target
MegamiBootstrapper.rar
-
Size
26KB
-
MD5
1762a31deaa49270c860a2bb4bb7db5f
-
SHA1
caac4114c20075fe8730b9e1da84ac77eed3c022
-
SHA256
d8509ebf7284c41de1216b477c77b639a071cb34757695e45f92e8014b5afb32
-
SHA512
1e3d10c110c5858db7a4add49d83dee3f981cab91536c8876ea477963e51e32c318f88ace64881065276a016d7bb2b9618e34f2f53bf68b6cc244eba9a23bb3b
-
SSDEEP
384:T9YI/BNY0xjvRF8tmA2MXnd2F/v1gkRi5510OjvH+lAR0PpAH3dI6drmpJSMWE:TqgcA5CtmA2cd2FmhJGM0RAXaMrmKY
Malware Config
Extracted
discordrat
-
discord_token
MTMxNjMwNDYxNDMzMjgyNTYxMA.GfkKyi.futKLbxb-b4NGCE9C3S0QF42BNSIJ4UKJomCTY
-
server_id
1316299088035315712
Signatures
-
Discordrat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Megami Bootstrapper/Megami Tensai/Bootstrapper.exe
Files
-
MegamiBootstrapper.rar.rar
-
Megami Bootstrapper/Megami Tensai/Bootstrapper.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ