Static task
static1
Behavioral task
behavioral1
Sample
calcgen/CalcGen v[1][1].2.21.71.157.exe
Resource
win7-20240508-en
General
-
Target
calcgen (1).rar
-
Size
390KB
-
MD5
1887ac94a1190115d268b4b4f098cf4c
-
SHA1
f505a3793e2af0cad517a71bd0af401b683ce753
-
SHA256
a89a0bd89ffbcd25d1f6c0f95d7fc1595f21a7f13b00fc3cd2b7190161939a50
-
SHA512
1841f6fac6ab70411efdd110cac2a118c2b3fa38d39762c2920a9834a90143415308feb0a2118c019ddc2b51e0f179e2899b446dd46f86486ca7239893bf678c
-
SSDEEP
6144:0ra/lMD6nGtiwAKquOE2z7WMErMcbanb2322b0kya7S9hIxqqjkc4DjgK:0udM2nGlquOz2TAc2nbU/3EQEqAc4DP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/calcgen/CalcGen v[1][1].2.21.71.157.exe
Files
-
calcgen (1).rar.rar
-
calcgen/CalcGen v[1][1].2.21.71.157.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 285KB - Virtual size: 764KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 50KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 57KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
calcgen/CalcGen.ini
-
calcgen/Varios Radios Instructions.txt