Behavioral task
behavioral1
Sample
1fea55f47de5299e90ae5fd43590d261.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
1fea55f47de5299e90ae5fd43590d261.exe
Resource
win10v2004-20231222-en
General
-
Target
1fea55f47de5299e90ae5fd43590d261
-
Size
281KB
-
MD5
1fea55f47de5299e90ae5fd43590d261
-
SHA1
45649e1ee9067d0db4d45b6b44a9aa2556172bde
-
SHA256
d1004ac34b3b693087f89d08a3ee01c89511f02cdeb9fa70318cf11ddfa13289
-
SHA512
90881ef6fd49e85cd232b49b4511e7937ade942b5cef79934999b95d85a3d7c8272160e517ba6edf971486c9b0757f32aa01e898e0c885f665146b325bedb689
-
SSDEEP
3072:mdH5BizRduBTaINt8oYx8PopsXgZa5avQQzUjHbjECaxNdvF46tYZIkSiJOGb3hk:i8RduBmINtMEQK7jECmNdvFPYZTv
Malware Config
Extracted
44caliber
https://discord.com/api/webhooks/880791855795699723/nRupy3zeNBsz3ZYRmnDWHyAHkcYA_2_aAeRsVCJNygy7yJbkcXNXzI5e3bfKLn5HvBfB
Signatures
-
44caliber family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 1fea55f47de5299e90ae5fd43590d261
Files
-
1fea55f47de5299e90ae5fd43590d261.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 278KB - Virtual size: 278KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ