Behavioral task
behavioral1
Sample
hi.exe
Resource
win10v2004-20250217-en
General
-
Target
hi.exe
-
Size
78KB
-
MD5
40ad387a93b7cd81f0f79be861ab93d9
-
SHA1
4102508d22f1aaa136f881a063ddce8e1e1fac51
-
SHA256
9f60b978b4e60a70cbc1037acb55ff4f6d61765b30ac2e12cf9cf8b2c51f8347
-
SHA512
23b1d218b42f973e4adc1b7d9c26df80da86ad38ed0c64d2dd9a5d89c854a947abd506eeeb89778fcd97d4b3f503996fc0f4d06d3def33717ac586d3fbfcfb91
-
SSDEEP
1536:52WjO8XeEXFh5P7v88wbjNrfxCXhRoKV6+V+kPIC:5Zv5PDwbjNrmAE+4IC
Malware Config
Extracted
discordrat
-
discord_token
MTM0NTM5MzQ2MDI1MzAzNjY0NQ.GrXV21.mbLL4SHVtIfeuQK4zD7pSOfnc8VzTKgzYjGA-Y
-
server_id
1345255073441251349
Signatures
-
Discordrat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource hi.exe
Files
-
hi.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ