Behavioral task
behavioral1
Sample
Client-built.exe
Resource
win11-20241007-en
General
-
Target
Client-built.exe
-
Size
78KB
-
MD5
ae435f868dfdec6d306fa6c99e832504
-
SHA1
a3c32006a91a02a378d5cf46986001a3da127378
-
SHA256
879434e9b5f6398a3bcc7dbeeccc41a7a8284a6d9029c1fe3db8353e61463783
-
SHA512
19a2c3a81fad52259464b41cdc5148781ce3e4795b42bf096a1134237c2087a082e0b0fb14366947036fb472178c7373211b09e50085b1ce3928518bfa13bb3d
-
SSDEEP
1536:52WjO8XeEXFh5P7v88wbjNrfxCXhRoKV6+V+5PIC:5Zv5PDwbjNrmAE+JIC
Malware Config
Extracted
discordrat
-
discord_token
MTMxNzk1MTI1OTgxODMzMjI1MQ.G93Qk4.H4mAeTd_60O2WKIyzj2t9Gqxi0w69VeDvI9dT0
-
server_id
1317948076505169970
Signatures
-
Discordrat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Client-built.exe
Files
-
Client-built.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ