Behavioral task
behavioral1
Sample
NEAS.caaa8a20f169f336fa07be4d1b3363cd.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
NEAS.caaa8a20f169f336fa07be4d1b3363cd.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.caaa8a20f169f336fa07be4d1b3363cd.exe
-
Size
2.2MB
-
MD5
caaa8a20f169f336fa07be4d1b3363cd
-
SHA1
7f1aa87c4fd7f4bc480bcdf44d854901a9933556
-
SHA256
89918806e94f635ff2dc5b1f585a9440200c89f71d3793e0aee76a3d0448ad07
-
SHA512
e3804037ce2d907023cb990697da4e8088e421b9b0aac8eba2ebd627f2dea6ac351e5e4ac8d681099d0403547b4a3cbf416ceef929ac4409d3cd40a3c54cdaae
-
SSDEEP
49152:OWdwBWg9hwviqxU9N+pPrHf5dqt03USyIFoCKu9gF7G0RjQ+9ok+nMSBP:v1g9hwiqxU9N+pPrHf5dqt03USyIFoCp
Malware Config
Signatures
-
Berbew family
-
Malware Backdoor - Berbew 1 IoCs
Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.
resource yara_rule sample family_berbew -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.caaa8a20f169f336fa07be4d1b3363cd.exe
Files
-
NEAS.caaa8a20f169f336fa07be4d1b3363cd.exe.exe windows:1 windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 45KB - Virtual size: 45KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 122KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ajelhf Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ