Static task
static1
Behavioral task
behavioral1
Sample
Pereb.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
Pereb.exe
Resource
win10v2004-20240226-en
General
-
Target
Pereb.exe
-
Size
28KB
-
MD5
19182b45528f107c22315d261ec9078f
-
SHA1
a2eb545fc488392be420a6381432155636a8aaf0
-
SHA256
8dcd142234b58c9c85d4b5e01205434fa0fa311124eec360394db4beff62d53a
-
SHA512
5f5122ce0f7d114de71cb4e54820a6c6682f1f5859dfaba82c09a830eb0aa92dd08cb696578c5cdf9b12cd43f739712ee6d476ff91f6445cc46c419ab757029b
-
SSDEEP
384:Lw79n1i4t6cSO1JyF0ksjDUlK4Ov8F0T6/BZzK8TXHgusSQR1HfIZ/W4gTl74XEv:Q9n048PAJRDOMeB9fAkQ3QlWf40Q/WB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Pereb.exe
Files
-
Pereb.exe.exe windows:1 windows x86 arch:x86
05c7df6d575c13faf78878f9450f3b20
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
ExitProcess
Sections
pec1 Size: 8KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
pec2 Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
pec3 Size: 19KB - Virtual size: 100KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE