berbew | 43d9517d8b0d18c2d6eaadf99c91a494a68ad9609af269f702dbd8c927b95cfeN | Triage

Sharing

Copy URL Twitter E-mail

General

Target

43d9517d8b0d18c2d6eaadf99c91a494a68ad9609af269f702dbd8c927b95cfeN
Size

128KB
MD5

cb781dacec069d4fc5a4fb57ee94f330
SHA1

3fdc089f5c31cafeba3845a30c6242e6da912dac
SHA256

43d9517d8b0d18c2d6eaadf99c91a494a68ad9609af269f702dbd8c927b95cfe
SHA512

21e454125be096393c73dca471c9e2c15a303de7cdb8d4c72bfcbb7bfff5c9c934ea3c7e3c2be8e339c43fc2ac6e096be250027352bdcb5c8e73972b09d9da4d
SSDEEP

3072:Or7jCfqYaseNDjHyL2CweBzlj9pui6yYPaI7DehizrVtN:67jCSY2NPHZCLJpui6yYPaIGc

Score

10^/10

berbew

Malware Config

Signatures

Berbew family
berbew

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
43d9517d8b0d18c2d6eaadf99c91a494a68ad9609af269f702dbd8c927b95cfeN

Files

43d9517d8b0d18c2d6eaadf99c91a494a68ad9609af269f702dbd8c927b95cfeN
.exe windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 45KB - Virtual size: 45KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 122KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ajelhf
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ