Behavioral task
behavioral1
Sample
NEAS.e43c724b3f2e4c78f69cbca2745826e0_JC.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.e43c724b3f2e4c78f69cbca2745826e0_JC.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.e43c724b3f2e4c78f69cbca2745826e0_JC.exe
-
Size
98KB
-
MD5
e43c724b3f2e4c78f69cbca2745826e0
-
SHA1
6e2306e2b2e8e7b39238bf3f0ede0cacdf99621d
-
SHA256
79d4bba1432ac3d8c06725ae9f3c3bb7fb21c445759d9e8dfb92d25b6a4da5ac
-
SHA512
58e94e85e89597b6067913a8eaf35f06bde74655d031a169c1cc1a870ea7403118f97aa53143b818b8cc76c1f81ba865e9de1c89444978d8c55b3d7e12fe4b26
-
SSDEEP
3072:TapmMKOzE0PXeD13sZ9BbdneThZ4rrsnUC:TVOY0C8pG4Md
Malware Config
Signatures
-
Berbew family
-
Malware Backdoor - Berbew 1 IoCs
Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.
resource yara_rule sample family_berbew -
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.e43c724b3f2e4c78f69cbca2745826e0_JC.exe
Files
-
NEAS.e43c724b3f2e4c78f69cbca2745826e0_JC.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 168KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
_RDATA Size: 55KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE