Behavioral task
behavioral1
Sample
5202a078b8140dcdee1252affb3011ea07dc5545f3c47fc4ea65545e4701e7bd.exe
Resource
win7-20221111-en
General
-
Target
7d87165c3a5c1985f306f5d0ed1d9e81.bin
-
Size
111KB
-
MD5
9e9db5a60af7bd6937bce0a92cd7ae45
-
SHA1
76711f130cd7237ee0fbe9f864b35aeda1cb9f23
-
SHA256
7d5c7fc5d0615f627cbeb5ea0a57bc6a55ceb68a108257a56e74da987d6b12e1
-
SHA512
2ec01ec520385966384950e919774f8b321e412f3220e530e0997d29015ffa4bc6d400afaa6ffeee1b5f2dccb0546e56cedbedbdd76c9385d719a9f0ae64a7e6
-
SSDEEP
3072:4l9yVyipPwdQpBaUb38ALWiFva6n7IaAKc:bxPRRIAKiFvaQPvc
Malware Config
Extracted
44caliber
https://discord.com/api/webhooks/1065354220359913512/Pys3daas1BA3mMnC78xAMBPHAX9j0vr2z02qX-TBFsJ7NrEwvGO3zrMc5T_i0UCkjNUs
Signatures
-
44caliber family
Files
-
7d87165c3a5c1985f306f5d0ed1d9e81.bin.zip
Password: infected
-
5202a078b8140dcdee1252affb3011ea07dc5545f3c47fc4ea65545e4701e7bd.exe.exe windows x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 272KB - Virtual size: 271KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ