Static task
static1
Behavioral task
behavioral1
Sample
d2fa23ff3612073d344a51d35531337b.exe
Resource
win7-20220414-en
General
-
Target
d2fa23ff3612073d344a51d35531337b.exe
-
Size
274KB
-
MD5
d2fa23ff3612073d344a51d35531337b
-
SHA1
868935912e8a7b2c2a7fa9953203aa49ed03403d
-
SHA256
72c486f862e71725ec5b05df3f273fee8ccd02b358d6e817d43e8f7f939980f9
-
SHA512
637ce0f72f9ed1b9299f2e9b42c6e4fd0f83a7b947e25e82f5ae1b2814cfc11245f348eee9528a9269ef670aff3fcfc6dfe0db3c5b7ccedaad37dcbd7ed6b62d
-
SSDEEP
6144:2f+BLtABPDtFxVb7lPxLE2a+h41V6GIeyXyRA1D0N5G:MFZPxLE2ZY69eyXX1DMG
Malware Config
Extracted
44caliber
https://discord.com/api/webhooks/868165756532179044/9Wht5QRwQI22RKhTqTychIaUX8rzws89p6FHzVstwwhhwpV9IhRLu6rdsBCywp4HVXuZ
Signatures
-
44caliber family
Files
-
d2fa23ff3612073d344a51d35531337b.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 272KB - Virtual size: 271KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ