44caliber | d3de0412bec54446b5d1ed2c4c5f4c70N | Triage

Sharing

General

Target

d3de0412bec54446b5d1ed2c4c5f4c70N
Size

303KB
MD5

d3de0412bec54446b5d1ed2c4c5f4c70
SHA1

54495a644a25c7d34dc54bea412dd5cc2a6134a2
SHA256

3a87cc4950e178d0d9cbdaed694c3f66eaa9188b737e77196fb7f04488de87b1
SHA512

b0a45b1802a029db70af34e99ebb366eae3d14abacfbc76a416f0546658144353be9f3239a2e04f8841f570183d19d0a4ac52e1d65f058d5003bf0df6097f50e
SSDEEP

6144:ijFT6MDdbICydeB0iG54G4S+ZoH86rmA1D0pFY:ijzQ54G4SuocQ1D4Y

Score

10^/10

44caliber

Malware Config

Extracted

Family

44caliber

C2

https://discord.com/api/webhooks/1279822438275743797/_20WkTO7p0GPrUxzs4Q2N_pDciklVwX5FNxvTPXTBG6N9rgt5NcWUwHYy3qnBKR_GZGa

Signatures

44caliber family
44caliber
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.

Processes:

resource

d3de0412bec54446b5d1ed2c4c5f4c70N

Files

d3de0412bec54446b5d1ed2c4c5f4c70N
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\Пингвин\Desktop\44CALIBER-main\44CALIBER\obj\Debug\Insidious.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 301KB - Virtual size: 300KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ