Behavioral task
behavioral1
Sample
NEAS.7e88431e0dfe0b9d0b994e0ee0df15d0.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.7e88431e0dfe0b9d0b994e0ee0df15d0.exe
Resource
win10v2004-20231023-en
General
-
Target
NEAS.7e88431e0dfe0b9d0b994e0ee0df15d0.exe
-
Size
277KB
-
MD5
7e88431e0dfe0b9d0b994e0ee0df15d0
-
SHA1
33647b6bcaf6e2c1ebc2c404d26ad2453d09cad9
-
SHA256
b96fb1c02d42f043d50541540c6b8855707e86a75eb5d6cea3e12d9bc28a4813
-
SHA512
0380f63fef0260a6483204dd8e8745828eb015508928737c58957e66bba08300587f99162662f85498006de156aadce823f09eeae46bc7207d8a2118cf4b90ca
-
SSDEEP
6144:CqfDDIrf9vsTVpBGwUgCC/f4dB2r6HBX8OFxXKP+fs75WJ:Cq3Iz5+XoPgC8f4dsyX8OHKmfs75WJ
Malware Config
Signatures
-
Berbew family
-
Malware Backdoor - Berbew 1 IoCs
Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.
resource yara_rule sample family_berbew -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.7e88431e0dfe0b9d0b994e0ee0df15d0.exe
Files
-
NEAS.7e88431e0dfe0b9d0b994e0ee0df15d0.exe.exe windows:4 windows x86
88f3855cdc413be71d42ba42634620ad
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
ole32
CoDisconnectObject
CoUninitialize
OleUninitialize
CoTaskMemAlloc
CoInitialize
CoInitializeSecurity
CoInitializeEx
Sections
.text Size: 240KB - Virtual size: 721KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ