Behavioral task
behavioral1
Sample
92c05ff388fbbb4e1aafb1502c108f2a.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
92c05ff388fbbb4e1aafb1502c108f2a.exe
Resource
win10v2004-20231215-en
General
-
Target
92c05ff388fbbb4e1aafb1502c108f2a.exe
-
Size
276KB
-
MD5
92c05ff388fbbb4e1aafb1502c108f2a
-
SHA1
f0c365b0128a70cc5e8d3fc72a82f73f1472ef2b
-
SHA256
26fb3925710c43de48e474c02997b1fd492c72cdafa1024143d19344d0a61170
-
SHA512
7c1146685fefc38959e08c380e84fd46defd09caff8cc27f8993b7a4483b9d931b4a6eb443bdc3a447c1c0f2ea2c172537a2a0dd3de585a3547714ba3977d972
-
SSDEEP
6144:IEe6cTDOORLSdn7MUZst5qXsunbLwMddjPXmF6EC1LlzxAKN+xTU5AX/KXWZCKlL:IPhR+pMUQunbpd/mF6ECJlzxAKN2X/Ws
Malware Config
Signatures
-
Berbew family
-
Malware Dropper & Backdoor - Berbew 1 IoCs
Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.
resource yara_rule sample family_berbew -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 92c05ff388fbbb4e1aafb1502c108f2a.exe
Files
-
92c05ff388fbbb4e1aafb1502c108f2a.exe.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 132KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gfcd Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ