Behavioral task
behavioral1
Sample
Macro/Xan V1.2.exe
Resource
win10ltsc2021-20241211-en
General
-
Target
Xan V1.2.rar
-
Size
26KB
-
MD5
afb2d50af31b5e0ceb5acf3f28678ece
-
SHA1
03794321e87442a8899a5593dd4545a906e0a00f
-
SHA256
e91d0bff53ee618498895ac338601e119f95ae8b4f3c665e9ff588959a5f1339
-
SHA512
17a737d32bb4082ec502734a2b86863c72925fedf8097d01fa24afcc60ccc6ed681cacd4aff00787d36a7b3ffc77514746e47a102489bf1ccde1d57f727f99be
-
SSDEEP
384:4/zz5+Fm9mzBDK9OazIpMEsl4v+ZexttksNOsDE1l6OinBqZe3K0GI+:Kz9Em9KDK9Ip62v+gxmseEtkZYR+
Malware Config
Extracted
discordrat
-
discord_token
MTMxNzk1MTk5ODA0NTMyNzQyMg.GXhSx7.R0pgyvEs6LoHtF1q1_zvXC4Eotr0ojDD2nAFzk
-
server_id
1317952259182694461
Signatures
-
Discordrat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Macro/Xan V1.2.exe
Files
-
Xan V1.2.rar.rar
-
Macro/Xan V1.2.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ