Behavioral task
behavioral1
Sample
c8bc237c1c9a16a0b61fe14f020a4680.exe
Resource
win7-20240221-en
General
-
Target
c8bc237c1c9a16a0b61fe14f020a4680
-
Size
252KB
-
MD5
c8bc237c1c9a16a0b61fe14f020a4680
-
SHA1
180816de04c2dcc1bed74070afac06b740d91318
-
SHA256
3c5606af64bc6d9e74aae62b177b9a0a5b16a86ff68f8b2925ad8971f9933038
-
SHA512
0781b3ace5353840769085d1dd443323e37bd09d7f52db62cedfd102f424a6d7b4da7fac7e23b004a3bb8487e9a1a2c83ac4f3bf424273d47fe54710d04f98c9
-
SSDEEP
3072:F07eU2iSjjuUPFLpsXMZgPBU13oNod6bcN9ToZ8E2PBfH4Ekz1eaMjAmectm13hv:SeUyjPjmPBUqN26bWW8EUJY1z1eRbp2
Malware Config
Extracted
44caliber
https://discord.com/api/webhooks/868196565515390987/7Jj72FAQ3nmAQ7X65Vp30BjA9kjuE3DDz3XgiNTRUNUr9fbEC6Rznra0GuxDjkoxkX4A
Signatures
-
44caliber family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c8bc237c1c9a16a0b61fe14f020a4680
Files
-
c8bc237c1c9a16a0b61fe14f020a4680.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 250KB - Virtual size: 249KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ