Behavioral task
behavioral1
Sample
Client-built.exe
Resource
win11-20241007-en
General
-
Target
Client-built.exe
-
Size
78KB
-
MD5
4a3ad9a17023d32b70d14c88747b0302
-
SHA1
a24fdb9e259d5db66a00aa392aea4b146a697787
-
SHA256
45e83d1277abd0a69f5a33f0cc20c51f804bbd26e9a0686117247ad4f27ed81a
-
SHA512
ee86349f849c0edf7a1c1080f71e12e8c659c6cffec168a3e6da5eaf52f9ecac69d0b2b7c01d69e282d6f44ad890cf60f080fd11b425fb93a74e0b7218d6070b
-
SSDEEP
1536:52WjO8XeEXFh5P7v88wbjNrfxCXhRoKV6+V+iPIC:5Zv5PDwbjNrmAE+OIC
Malware Config
Extracted
discordrat
-
discord_token
MTMyNzMxODAyNTIyMDkxNTIyMA.Gbhmly.2VnF8G_nnJt-kiY3NLK0toQR92qky0l7vAaT4Y
-
server_id
1327319098295582744
Signatures
-
Discordrat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Client-built.exe
Files
-
Client-built.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ