Behavioral task
behavioral1
Sample
eaa5e69e706e81a607b8c29354f7763ab14851605479b15dedc44084f5782b9f.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
eaa5e69e706e81a607b8c29354f7763ab14851605479b15dedc44084f5782b9f.exe
Resource
win10v2004-20241007-en
General
-
Target
eaa5e69e706e81a607b8c29354f7763ab14851605479b15dedc44084f5782b9f.exe
-
Size
144KB
-
MD5
2205985786193414158d9c15aaa22fbe
-
SHA1
97aacfd9cfdd56281409fd97212cbc17500b8058
-
SHA256
eaa5e69e706e81a607b8c29354f7763ab14851605479b15dedc44084f5782b9f
-
SHA512
281f71ef8e818cb8e3c928c92cad6a79d435dbfe3e3fa4a5b078efd1a04a784763642d2369c06a36a0dd12e335eacbc6d07114be15d2743440e1e2a5f55da265
-
SSDEEP
3072:C/zyd4Emnpc377XDY5GURlSjgjxxt8vgHq/Wp+YmKfxg5:8zKfmn0/XDY5LRlUivKvUmKy5
Malware Config
Signatures
-
Berbew family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource eaa5e69e706e81a607b8c29354f7763ab14851605479b15dedc44084f5782b9f.exe
Files
-
eaa5e69e706e81a607b8c29354f7763ab14851605479b15dedc44084f5782b9f.exe.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 51KB - Virtual size: 51KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 122KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.tls Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.pdata Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ