Behavioral task
behavioral1
Sample
NEAS.66f264adc4e4fe0901ddefdc342d1b80.exe
Resource
win7-20231020-en
General
-
Target
NEAS.66f264adc4e4fe0901ddefdc342d1b80.exe
-
Size
315KB
-
MD5
66f264adc4e4fe0901ddefdc342d1b80
-
SHA1
9bc00b4c0cd5b7739a63593c8b39fabacab9f794
-
SHA256
c10057754712615166fdd49c76fc13833471ed5f0707c5949b46965700d5a210
-
SHA512
6d772a05724639168bed08fc1aac9b1feb8055058185467c30569673205ef011a32cbd6de10984d7cf8818d3e5bb1d9c1ab6926a6299f53495b8a29094700b29
-
SSDEEP
6144:tdJ17AFbGXCrTWYlD8lHXLaxVd4plm8nw4zlIuW/SgjZF5:PKbGXEWYlD6HXLydslmYwqXW/Ss5
Malware Config
Signatures
-
Berbew family
-
Malware Backdoor - Berbew 1 IoCs
Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.
resource yara_rule sample family_berbew -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.66f264adc4e4fe0901ddefdc342d1b80.exe
Files
-
NEAS.66f264adc4e4fe0901ddefdc342d1b80.exe.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 277KB - Virtual size: 276KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ