Behavioral task
behavioral1
Sample
75963260b65767fde9d563e8fe1d64a2cb669c1d9c193c002b156133fbd2c342N.exe
Resource
win7-20240903-en
General
-
Target
75963260b65767fde9d563e8fe1d64a2cb669c1d9c193c002b156133fbd2c342N.exe
-
Size
472KB
-
MD5
e65e917f6f8c95ac0e44998d1030b820
-
SHA1
e9ffbe1b319b3c85f951d9dd21e9b41450a1f7b1
-
SHA256
75963260b65767fde9d563e8fe1d64a2cb669c1d9c193c002b156133fbd2c342
-
SHA512
2a03ed22f04ddaa7a0d42d80adedf7cf7b49b964d70c1dc571c4c384c8bb0c452f7196f1ee789dae5cb3bc8a41398d7656b5926e1c17e43ae918ff0829b43dfc
-
SSDEEP
3072:b8RinudiP52xx67lLdwiHDo69be7/tZ/z++z347sVj:okgiPA6RCP267DxL7l
Malware Config
Signatures
-
Berbew family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 75963260b65767fde9d563e8fe1d64a2cb669c1d9c193c002b156133fbd2c342N.exe
Files
-
75963260b65767fde9d563e8fe1d64a2cb669c1d9c193c002b156133fbd2c342N.exe.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 52KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: 124KB - Virtual size: 124KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.flh Size: 268KB - Virtual size: 268KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ