berbew | 1b53d62f5a80fd1a2b400a97f5637997b05e11bb26ecd74f5a6e0c214ec84fbaN[.]exe | Triage

Sharing

General

Target

1b53d62f5a80fd1a2b400a97f5637997b05e11bb26ecd74f5a6e0c214ec84fbaN.exe
Size

472KB
MD5

e4f733ec660979031add5a321d16fa50
SHA1

698e4ee31e4b59513ac15a1f6ddbd49e090a3124
SHA256

1b53d62f5a80fd1a2b400a97f5637997b05e11bb26ecd74f5a6e0c214ec84fba
SHA512

4c61676805195af45491f5b10078220354e9b10254d550df9fee339da32d77579274f8c40e3796488403f0d5a28c6818a026ea6becb9255cbde153227806c585
SSDEEP

3072:Q08RinudiP52xx67lLdMiHDoVJEpZQsWRjGf5De:QRkgiPA6RiPVJ86fpG1e

Score

10^/10

berbew

Malware Config

Signatures

Berbew family
berbew

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1b53d62f5a80fd1a2b400a97f5637997b05e11bb26ecd74f5a6e0c214ec84fbaN.exe

Files

1b53d62f5a80fd1a2b400a97f5637997b05e11bb26ecd74f5a6e0c214ec84fbaN.exe
.exe windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 52KB - Virtual size: 52KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: 124KB - Virtual size: 124KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.flh
Size: 268KB - Virtual size: 268KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ