berbew | 3194a75d8ec0556ec8ae83ca126162033c22de84728e8ea8d2a75e9ab308100dN

Sharing

Copy URL Twitter E-mail

General

Target

3194a75d8ec0556ec8ae83ca126162033c22de84728e8ea8d2a75e9ab308100dN
Size

192KB
MD5

e55a3dc816d207ecd0ccc23f8b5cafd0
SHA1

efae528133b87b8e3572a9293d2c5deba258682c
SHA256

3194a75d8ec0556ec8ae83ca126162033c22de84728e8ea8d2a75e9ab308100d
SHA512

467b8886135b41ad18670a10c4271179c5bbce78af5b60f3fc5f5ae3e88b67c76a64709fc6ebf1bf75174d0c59acba644dcc1b3d3216129a9ed43820b20d9647
SSDEEP

3072:9hd6L8IQX5M6VenYeP5nLoYDGNlib5qfpfGU4lfirgjZXmK:9hd6LFiM6YTRL7GNlighD4lTjZXN

Score

10^/10

berbew

Malware Config

Signatures

Berbew family
berbew

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3194a75d8ec0556ec8ae83ca126162033c22de84728e8ea8d2a75e9ab308100dN

Files

3194a75d8ec0556ec8ae83ca126162033c22de84728e8ea8d2a75e9ab308100dN
.exe windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 45KB - Virtual size: 45KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 122KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ajelhf
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

CODE
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Headers

File Characteristics

Sections

.text Size: 45KB - Virtual size: 45KB

.bss Size: - Virtual size: 122KB

.reloc Size: 12KB - Virtual size: 12KB

.idata Size: 4KB - Virtual size: 4KB

.ajelhf Size: 512B - Virtual size: 4KB

.reloc Size: 7KB - Virtual size: 8KB

CODE Size: 4KB - Virtual size: 4KB

.data Size: 512B - Virtual size: 4KB

.rsrc Size: 512B - Virtual size: 4KB

.reloc Size: 5KB - Virtual size: 8KB

.rsrc Size: 9KB - Virtual size: 12KB

.reloc Size: 512B - Virtual size: 4KB

.idata Size: 512B - Virtual size: 4KB

.data Size: 8KB - Virtual size: 8KB

.text Size: 5KB - Virtual size: 8KB

.text Size: 6KB - Virtual size: 8KB

.text
Size: 45KB - Virtual size: 45KB

.bss
Size: - Virtual size: 122KB

.reloc
Size: 12KB - Virtual size: 12KB

.idata
Size: 4KB - Virtual size: 4KB

.ajelhf
Size: 512B - Virtual size: 4KB

.reloc
Size: 7KB - Virtual size: 8KB

CODE
Size: 4KB - Virtual size: 4KB

.data
Size: 512B - Virtual size: 4KB

.rsrc
Size: 512B - Virtual size: 4KB

.reloc
Size: 5KB - Virtual size: 8KB

.rsrc
Size: 9KB - Virtual size: 12KB

.reloc
Size: 512B - Virtual size: 4KB

.idata
Size: 512B - Virtual size: 4KB

.data
Size: 8KB - Virtual size: 8KB

.text
Size: 5KB - Virtual size: 8KB

.text
Size: 6KB - Virtual size: 8KB