berbew | ed20abd26be5029b36ede5a7618a0050e443790b2a8b9fed92020a349ab980b9N | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ed20abd26be5029b36ede5a7618a0050e443790b2a8b9fed92020a349ab980b9N
Size

256KB
MD5

a0458c39efccb15a17d5774e8b3eb550
SHA1

43e73ba3a7341da96d938ea1011af1382df1ad14
SHA256

ed20abd26be5029b36ede5a7618a0050e443790b2a8b9fed92020a349ab980b9
SHA512

0fe4a51da52f184576c8546cc8f09a8df7f197e03abf4a5ef950341aa64bf74e846204145b23062628c01d3dba3d6fc57b4df661e4776d61c996b39dc567affa
SSDEEP

6144:AJeZf9qOEsJSLrpui6yYPaIGckfru5xyDpui6yYPaIGcV:6edJSLrpV6yYP4rbpV6yYPl

Score

10^/10

berbew

Malware Config

Signatures

Berbew family
berbew

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ed20abd26be5029b36ede5a7618a0050e443790b2a8b9fed92020a349ab980b9N

Files

ed20abd26be5029b36ede5a7618a0050e443790b2a8b9fed92020a349ab980b9N
.exe windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.reloc
Size: 45KB - Virtual size: 45KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 122KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ