Behavioral task
behavioral1
Sample
9f54f4d334d0c3fee2b30380f10438e64e740de82dcbf7c17f96cd4cf1a3d820.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
9f54f4d334d0c3fee2b30380f10438e64e740de82dcbf7c17f96cd4cf1a3d820.exe
Resource
win10v2004-20241007-en
General
-
Target
9f54f4d334d0c3fee2b30380f10438e64e740de82dcbf7c17f96cd4cf1a3d820
-
Size
192KB
-
MD5
ef20aec2a706831fe1f65f01e3557883
-
SHA1
9cd7e5ef2920022016b9fd7f89bd309ecd251185
-
SHA256
9f54f4d334d0c3fee2b30380f10438e64e740de82dcbf7c17f96cd4cf1a3d820
-
SHA512
f0c515877a84eebf8f8a2b51f88ac7ac11fe3e938c0b374fabdd0e035ffb4f5cc33e27408d4da3fd12f53ff53dd600c10e6b72a4f43184119106ee763d1a3f2b
-
SSDEEP
3072:eRaFzR0zgeR68ROP3kremwc/gHq/Wp+YmKfxgQdxvzSTsXXoT2z:AaFzCaP3/fc/UmKyIxLDXXoqz
Malware Config
Signatures
-
Berbew family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9f54f4d334d0c3fee2b30380f10438e64e740de82dcbf7c17f96cd4cf1a3d820
Files
-
9f54f4d334d0c3fee2b30380f10438e64e740de82dcbf7c17f96cd4cf1a3d820.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 51KB - Virtual size: 51KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 122KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ