Behavioral task
behavioral1
Sample
Client-built.exe
Resource
win10ltsc2021-20241211-en
General
-
Target
Client-built.exe
-
Size
78KB
-
MD5
41c6413a76f8b505545680879c38175c
-
SHA1
a6269b7b62a50ab43b498d20b9c2a3b5f3530013
-
SHA256
fb15e77decec4da1825309c787978ab7a86003b7bc973697cf8338d560b93798
-
SHA512
933f37ef2be92464b18631aeab619860bbad20f90427784568b9572a682c405bb5306759f50e6ed8d9344451f02ca85709899e09700c0e47657af77363bf49c2
-
SSDEEP
1536:52WjO8XeEXFh5P7v88wbjNrfxCXhRoKV6+V++PIC:5Zv5PDwbjNrmAE+6IC
Malware Config
Extracted
discordrat
-
discord_token
MTMyMDQyMjc2NDc2MjM3MDA2OA.GZYyYW.zpYp_zgxGk9hDC_oq1XNVF8hXzUTTzoorEi9JQ
-
server_id
1320420510445736086
Signatures
-
Discordrat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Client-built.exe
Files
-
Client-built.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ