Behavioral task
behavioral1
Sample
0a041b2c3b560ed2f165ce689b1a7b09.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
0a041b2c3b560ed2f165ce689b1a7b09.exe
Resource
win10v2004-20231020-en
General
-
Target
0a041b2c3b560ed2f165ce689b1a7b09.exe
-
Size
909KB
-
MD5
0a041b2c3b560ed2f165ce689b1a7b09
-
SHA1
1a1d0f890a792aaab6d7fc667f1aa7694f0f81fb
-
SHA256
a4b2f5fb4b8f67b065132aafb4d0e7ad50503cc0fcc58d1a9fd8252693ef519a
-
SHA512
0ea003d8fc15e171f81663597950fedca32f0ab8b98b0ea7e7d2490cceb3d128444afe31014ed440a628437a1b52a16e3f95c7f806ba53c465e6fccfd8cce0c3
-
SSDEEP
24576:9rtTGoSpY4Jro3TpBypjhqWgstIA5qlLZu5MO4we2G9CEzlpd68EW:f+r2TpBypjhqWgstIA0ZZu5MO4p2cCEZ
Malware Config
Signatures
-
Berbew family
-
Malware Backdoor - Berbew 1 IoCs
Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.
resource yara_rule sample family_berbew -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0a041b2c3b560ed2f165ce689b1a7b09.exe
Files
-
0a041b2c3b560ed2f165ce689b1a7b09.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 352KB - Virtual size: 356KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.l2 Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ