berbew | 69ee73e99671ddf9b3632f03383608e9154cabc44f5fb11b0f2a201b039f9e83 | Triage

Sharing

General

Target

69ee73e99671ddf9b3632f03383608e9154cabc44f5fb11b0f2a201b039f9e83
Size

472KB
MD5

9b4c0a89113dbd6b407fed3ffa93c773
SHA1

bb9c7f688e3fc7ebd9fba1e5598e87ac8aa57d31
SHA256

69ee73e99671ddf9b3632f03383608e9154cabc44f5fb11b0f2a201b039f9e83
SHA512

dcc83a1412d5292be1226e192729a2a469b4837a1c458abe48ce20fa2ac19e4e76399096fad58821a90f5c632de0c714f04b9d9ae114a127da005c4ba5d440fb
SSDEEP

3072:H8RinudiP52xx67lLdNiHDoRFMY4x0D/3sEqKPANTVeZbikDIp2:ckgiPA6RjPReYVDkEqXNxC

Score

10^/10

berbew

Malware Config

Signatures

Berbew family
berbew

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
69ee73e99671ddf9b3632f03383608e9154cabc44f5fb11b0f2a201b039f9e83

Files

69ee73e99671ddf9b3632f03383608e9154cabc44f5fb11b0f2a201b039f9e83
.exe windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 52KB - Virtual size: 52KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: 124KB - Virtual size: 124KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.flh
Size: 268KB - Virtual size: 268KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ