Behavioral task
behavioral1
Sample
Client-built.exe
Resource
win11-20250313-en
General
-
Target
Client-built.exe
-
Size
78KB
-
MD5
fe6ac21b3f97ebb4d19ee336cfdc75bf
-
SHA1
9bb6f19ff60d9f0a550f9bedaea63debf3d3a49c
-
SHA256
faece5f525d1b95daca76e943128cafbf2ce22521926ffbb5c896f78c149fab8
-
SHA512
74bcf3406e91a6ceb39e1d99392c0095a5d95d535a121ec34f5989d901a419a21b61554482896a9305ed3bc2db05160bd22b70348472b39d8e54ac09ffcadcff
-
SSDEEP
1536:52WjO8XeEXFh5P7v88wbjNrfxCXhRoKV6+V+FPIC:5Zv5PDwbjNrmAE+VIC
Malware Config
Extracted
discordrat
-
discord_token
MTIwMDc0MjY3NjAxMDY0MzYxNg.GwqP0d.L4z2jKSoVGlsFnli3GxYPBA2T0AUaXdFWOrlPQ
-
server_id
1260997893373038662
Signatures
-
Discordrat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Client-built.exe
Files
-
Client-built.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ