Behavioral task
behavioral1
Sample
11fce5c699444d6da2ade5cd2d3c1f5f9a8ada1adc8d0615fce80525430cf821N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
11fce5c699444d6da2ade5cd2d3c1f5f9a8ada1adc8d0615fce80525430cf821N.exe
Resource
win10v2004-20240802-en
General
-
Target
11fce5c699444d6da2ade5cd2d3c1f5f9a8ada1adc8d0615fce80525430cf821N
-
Size
161KB
-
MD5
f67210d8a8912bc168f9d06f03cda780
-
SHA1
41fb99282010be49fc32787ed8caa559da9f1373
-
SHA256
11fce5c699444d6da2ade5cd2d3c1f5f9a8ada1adc8d0615fce80525430cf821
-
SHA512
b1c2bbb4a7c904c8c6f87800dde753938f98d6d81d3ae2581c771ec77bde9f2198c30258ad61d933eb161bbdf3110c563f07a7c13f75dd7a05651472383ecab5
-
SSDEEP
3072:FENGy3LVGbwFIFo2lSU0ai9iTopSGkoMVwtCJXeex7rrIRZK8K8/kvV:FkGyJGfFoAl4Nk/VwtmeetrIyRV
Malware Config
Signatures
-
Berbew family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 11fce5c699444d6da2ade5cd2d3c1f5f9a8ada1adc8d0615fce80525430cf821N
Files
-
11fce5c699444d6da2ade5cd2d3c1f5f9a8ada1adc8d0615fce80525430cf821N.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.reloc Size: 51KB - Virtual size: 51KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 122KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.flh Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
DATA Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ