Backdoor[.]Win32[.]Berbew[.]pz-bfd3fad8eda3674faf308c26432645c3b607755c54b917966613a9c45f1b451bN | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Backdoor.Win32.Berbew.pz-bfd3fad8eda3674faf308c26432645c3b607755c54b917966613a9c45f1b451bN
Size

80KB
MD5

4f7b1bb1663a16ec3a84493880a0f520
SHA1

48b2c30819bbb30b8480cd121a46e3bb9d871d67
SHA256

bfd3fad8eda3674faf308c26432645c3b607755c54b917966613a9c45f1b451b
SHA512

18cb323ede797898597db13f714b6df88dcee67249a964a49a951190bc5e078765ee1b40b0f26df2a275f7abc5afd71e59fe1eebc8ac7c0d0b3d4a58e8fcbc85
SSDEEP

1536:ZeedwMmkGO+oaRZ9JKzDfWqdMVrlEFtyb7IYOOqw4Tv:ZecmkGO+oMZ9JKzTWqAhELy1MTTv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Backdoor.Win32.Berbew.pz-bfd3fad8eda3674faf308c26432645c3b607755c54b917966613a9c45f1b451bN

Files

Backdoor.Win32.Berbew.pz-bfd3fad8eda3674faf308c26432645c3b607755c54b917966613a9c45f1b451bN
.exe windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 132KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.fldo
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.l1
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ