Behavioral task
behavioral1
Sample
Client-built.exe
Resource
win11-20241007-en
General
-
Target
Client-built.exe
-
Size
78KB
-
MD5
8703559c0b9c8c89320913a1c4c1ae4f
-
SHA1
d6ce08ff8c5b17417b7311ceb90c90915646694b
-
SHA256
bc1a4130fb7cd74ec1d007a3a02077d62a044fffb0cf3da0facc9ffd6053c53b
-
SHA512
5d921473b0319f2d2a7aa3fd0c066a2d948ae214156087e4c050896583662cdf5fb365ab18bccffa3d5f41ab6643a4090ad05d082c111262726e3a5e6b830df7
-
SSDEEP
1536:52WjO8XeEXFh5P7v88wbjNrfxCXhRoKV6+V+pPIC:5Zv5PDwbjNrmAE+ZIC
Malware Config
Extracted
discordrat
-
discord_token
MTMzNjY5NTMzNTc5NTI5NDIxMA.Gcz8aM.S9GNOb8hb_K5jw1INx35qkuuY43bIbRdj8HWZQ
-
server_id
1336081242344390706
Signatures
-
Discordrat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Client-built.exe
Files
-
Client-built.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ