berbew | b6acfe7304cdcc51c359252741255f60ddd98486f16927d87b5038cd5160515dN | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b6acfe7304cdcc51c359252741255f60ddd98486f16927d87b5038cd5160515dN
Size

256KB
MD5

244446946fd8535b9ae6db67c0838cf0
SHA1

4b67f8e82d31125c9e30612bb53d39a3dffab8d1
SHA256

b6acfe7304cdcc51c359252741255f60ddd98486f16927d87b5038cd5160515d
SHA512

96cc592c6d95bc0008ee9fe16358f806f0e529216d56a31348eb8175a78e225ed51566bffcf289704537f5b7255700b7e64be8fe255256de0924274b934947f7
SSDEEP

6144:59XiLxI3yJSLrpui6yYPaIGckfru5xyDpui6yYPaIGcV:59aJJSLrpV6yYP4rbpV6yYPl

Score

10^/10

berbew

Malware Config

Signatures

Berbew family
berbew

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b6acfe7304cdcc51c359252741255f60ddd98486f16927d87b5038cd5160515dN

Files

b6acfe7304cdcc51c359252741255f60ddd98486f16927d87b5038cd5160515dN
.exe windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.reloc
Size: 45KB - Virtual size: 45KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 122KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ