C:\Users\Вова\Desktop\44CALIBER-main\44CALIBER\obj\Debug\Insidious.pdb
Behavioral task
behavioral1
Sample
d5c99e1f25dbdbec5a2545a4cea9e948f7b7c8188cc966b8ac69f3b1b95cea82.exe
Resource
win7-20240903-en
General
-
Target
d5c99e1f25dbdbec5a2545a4cea9e948f7b7c8188cc966b8ac69f3b1b95cea82
-
Size
303KB
-
MD5
5c6721a4445b1ad34affb5d66c987573
-
SHA1
d2f20db4d9a3fd2e72a0545926b6fee1f3283d47
-
SHA256
d5c99e1f25dbdbec5a2545a4cea9e948f7b7c8188cc966b8ac69f3b1b95cea82
-
SHA512
15c3d229c7ad3e2036405c68f7f59f03cf774348e89d7fdf04cf0c1220c34cd6029bb5b96a5084a056cb4aadab2474a915a0c0640015e5ccd30c472a68a2e085
-
SSDEEP
6144:PjFT6MDdbICydeB0iG54G4S+ZoH86jmA1D0/Hx:PjzQ54G4SuocY1Dsx
Malware Config
Extracted
44caliber
https://discord.com/api/webhooks/1303704145731260446/-6ntBnd7ROApHmCsRB7Lli7gKTsLyWRgcOJ-cJbRXh5PQKViLyldpkyDBWbuBRUun_nd
Signatures
-
44caliber family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource d5c99e1f25dbdbec5a2545a4cea9e948f7b7c8188cc966b8ac69f3b1b95cea82
Files
-
d5c99e1f25dbdbec5a2545a4cea9e948f7b7c8188cc966b8ac69f3b1b95cea82.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 301KB - Virtual size: 300KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ