Behavioral task
behavioral1
Sample
FPS-BOOSTER.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
FPS-BOOSTER.exe
Resource
win10v2004-20250217-en
General
-
Target
FPS-BOOSTER.exe
-
Size
78KB
-
MD5
3c032b4116006c30b893b7a8b8e08b75
-
SHA1
7584ed01df281485a17123ee23377a71048f73ef
-
SHA256
89c2ac866812a8dbfce799b0fa61e839b434e995b5745d6a7aa8c59742b62aca
-
SHA512
5b255826c9f0e99e2a35a883736d2d6155f54295c624c7e944d8ebd987fa5951a0db0e6c973ec67fbc79d37788e6da3f5eb284924693705578a1fa759e815d32
-
SSDEEP
1536:52WjO8XeEXFh5P7v88wbjNrfxCXhRoKV6+V++TPIC:5Zv5PDwbjNrmAE+OIC
Malware Config
Extracted
discordrat
-
discord_token
MTM0Mjg2NjEwMzc1MTI4MjgwOQ.GG_lrZ.-z0UM5O7WblS0KobrxK8naZ8No2obDw3c_CTm4
-
server_id
1320021398919319632
Signatures
-
Discordrat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource FPS-BOOSTER.exe
Files
-
FPS-BOOSTER.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ