berbew | 97b78826d8f424aea81b64c10515f778d20da219551320807899509ccf3a028d | Triage

Sharing

General

Target

97b78826d8f424aea81b64c10515f778d20da219551320807899509ccf3a028d
Size

472KB
MD5

f5d8b10d94558164c03d2dee6c792664
SHA1

fc422e98b10057f7c7caf9181307bc03a880ceb7
SHA256

97b78826d8f424aea81b64c10515f778d20da219551320807899509ccf3a028d
SHA512

ceb4b113d206e7be344cdb213c3c2158c6e4cef98362d586031047e6dac5f0ffd5b1a15cab734efb40948a4d7d139e3546f99008439f9203efc0897187f91e5e
SSDEEP

3072:EQ8RinudiP52xx67lLdniHDoi1cYsexJvKpK2YsVjtD:+kgiPA6RNPBuVKpK2Y+D

Score

10^/10

berbew

Malware Config

Signatures

Berbew family
berbew

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
97b78826d8f424aea81b64c10515f778d20da219551320807899509ccf3a028d

Files

97b78826d8f424aea81b64c10515f778d20da219551320807899509ccf3a028d
.exe windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 52KB - Virtual size: 52KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: 124KB - Virtual size: 124KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.flh
Size: 268KB - Virtual size: 268KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ