44caliber | 0x0007000000024246-80[.]dat | Triage

Sharing

General

Target

0x0007000000024246-80.dat
Size

303KB
MD5

c1bd28d151c9557fc0b441f864c7b3d0
SHA1

330ba588d809c8908468178b548afc6ed26fb91a
SHA256

a9136c89f82063ae8f594293fd8738c407eb551c00b04ff147e1e58fbdbab422
SHA512

8126a8741988df068c23911eea05eb28a57222587a3f9a722aed497da89981012c7cc44ff0b51f7d9436b536b1468403ac0276b153d70ee85ec0d77d4045a1ce
SSDEEP

6144:Vz2ZNT6MDdbICydeBblLIGv2A5sA2s6pmA1D0zTq:Vzi5IGv20sEC1DIq

Score

10^/10

44caliber

Malware Config

Extracted

Family

44caliber

C2

https://discord.com/api/webhooks/1324859273448128522/35NX8pTWSAG9BYKMS0plx5Cvuvs_8H5JGZj2A702Gn1FEZ64KTjaAl3gNKdJNc1eYdeY

Signatures

44caliber family
44caliber

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0x0007000000024246-80.dat

Files

0x0007000000024246-80.dat
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\aptem\Desktop\Новая папка (7)\стиллер\44CALIBER\obj\Debug\Insidious.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 300KB - Virtual size: 300KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ