Static task
static1
Behavioral task
behavioral1
Sample
cc3374a948c98c5be192fd7318b405fe41816e6c372751773ca7b1c9d0d6360e.exe
Resource
win7-20220223-en
General
-
Target
cc3374a948c98c5be192fd7318b405fe41816e6c372751773ca7b1c9d0d6360e.bin
-
Size
303KB
-
MD5
2e491c60d790fd786e4fbdf90b373c59
-
SHA1
8a5d5c2982020d1427b16c0822234aac98f035cc
-
SHA256
cc3374a948c98c5be192fd7318b405fe41816e6c372751773ca7b1c9d0d6360e
-
SHA512
a1170294273ec32fa1af9ea039dd9f997e764170eed5e5ab629344b63c2aff7941f8635bff3c23b566902f13c69c739bd4ae977cf9fc2f51b3354133b0b664df
Malware Config
Extracted
44caliber
https://discord.com/api/webhooks/942463554903236658/eGpoLSgLok8IhLx5vkiAmEckByCTxphzQ8sOJ-zvhUCc7hcVLCWAgc-5IQbCbcls-nn2
Signatures
-
44caliber family
Files
-
cc3374a948c98c5be192fd7318b405fe41816e6c372751773ca7b1c9d0d6360e.bin.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Code Sign
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 301KB - Virtual size: 300KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ