Static task
static1
Behavioral task
behavioral1
Sample
0x000b000000012737-60.exe
Resource
win7-20220331-en
General
-
Target
0x000b000000012737-60.dat
-
Size
274KB
-
MD5
f0a6137751223c932f77f1807ad0805e
-
SHA1
af5befc8e36c8c062ef96ad57e8e1a1f39a2f675
-
SHA256
2105779b2f3e3f454cea059d25484b9ef423a0318abc7c8cbe04289e393e8697
-
SHA512
c4096757420b11bc3748522202efb0d8ee1ecd09e7b773505a96124a339e40951533432d02dfbc929380f8a15160ed2911018dee56b2af7db4d6d9222e4dee4a
-
SSDEEP
6144:Fef+BLtABPDdEqZcw4CBLp00wR41V6GIeyXqRA1D0nTL:mE7CBLp0ZY69eyXP1DAL
Malware Config
Extracted
44caliber
https://discord.com/api/webhooks/959366883545579581/Z1Be8qUrtXUbCZydkDEnV1VMcMYEDqpAE1fFmNhN26L5vd4nrcJOGi-iQnD-msZc-BJX
Signatures
-
44caliber family
Files
-
0x000b000000012737-60.dat.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 272KB - Virtual size: 271KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ