bebra[.]exe | Triage

Resubmissions

20/12/2022, 01:31

221220-bxghjsge53 7

20/12/2022, 00:25

221220-aqymtabe6t 7

Sharing

Copy URL Twitter E-mail

General

Target

bebra.exe
Size

7.5MB
MD5

d54e7bf49911210420c73b5f116a82a7
SHA1

663c81dbb401b59d52847a741ea212a2d25e5521
SHA256

83239325ee2d999147e5ce1ab79c12c91674b6d1bcc021290bd04946bd8b393a
SHA512

c55f3db8ad7cae0101bd0dfed964b7ec322f9d88c5be417885e5477512b0fc63e6bdaa98dc16a527f961c54836351e5ad0407ed67c8d5b1cae6c13dca5641cd0
SSDEEP

196608:WCkx47S92num9fjZ+Sa9/Y7Nm6bXitJFp:WhYMzuFxR7NpcFp

Score

N/A

Malware Config

Signatures

Files

bebra.exe
.exe windows x64

a967f4d5f371ff6b794294e7b7b8460f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetVersionExA
GetVersionExW
GetSystemTimeAsFileTime
LocalAlloc
LocalFree
GetModuleFileNameW
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress

msvcrt

__getmainargs

user32

CharUpperBuffW

Exports

Exports

_cgo_dummy_export
authorizerTrampoline
callbackTrampoline
commitHookTrampoline
compareTrampoline
doneTrampoline
preUpdateHookTrampoline
rollbackHookTrampoline
stepTrampoline
updateHookTrampoline

Sections

D5<>8<ba
Size: - Virtual size: 4.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

u4+/3nyr
Size: - Virtual size: 260KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

L[ouz8V@
Size: - Virtual size: 3.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

rV8wmKvC
Size: - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Pj\G8;V:
Size: - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

D57V1ZQe
Size: - Virtual size: 387KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

^<+/8+bI
Size: - Virtual size: 345B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

^]bZXAqC
Size: - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Zo,-ucV@
Size: - Virtual size: 104B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

hB.HPsue
Size: - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

R=5jsx3i
Size: - Virtual size: 2.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

3pu^RHr8
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

+DGI-xsD
Size: 7.2MB - Virtual size: 7.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Y[\`m/UB
Size: 512B - Virtual size: 180B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

B^9CgFxm
Size: 288KB - Virtual size: 287KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Resubmissions

Sharing

General

Malware Config

Signatures

Files

a967f4d5f371ff6b794294e7b7b8460f

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

msvcrt

user32

Exports

Exports

Sections

D5<>8<ba Size: - Virtual size: 4.0MB

u4+/3nyr Size: - Virtual size: 260KB

L[ouz8V@ Size: - Virtual size: 3.1MB

rV8wmKvC Size: - Virtual size: 23KB

Pj\G8;V: Size: - Virtual size: 25KB

D57V1ZQe Size: - Virtual size: 387KB

^<+/8+bI Size: - Virtual size: 345B

^]bZXAqC Size: - Virtual size: 5KB

Zo,-ucV@ Size: - Virtual size: 104B

hB.HPsue Size: - Virtual size: 16B

R=5jsx3i Size: - Virtual size: 2.7MB

3pu^RHr8 Size: 3KB - Virtual size: 2KB

+DGI-xsD Size: 7.2MB - Virtual size: 7.2MB

Y[\`m/UB Size: 512B - Virtual size: 180B

B^9CgFxm Size: 288KB - Virtual size: 287KB

D5<>8<ba
Size: - Virtual size: 4.0MB

u4+/3nyr
Size: - Virtual size: 260KB

L[ouz8V@
Size: - Virtual size: 3.1MB

rV8wmKvC
Size: - Virtual size: 23KB

Pj\G8;V:
Size: - Virtual size: 25KB

D57V1ZQe
Size: - Virtual size: 387KB

^<+/8+bI
Size: - Virtual size: 345B

^]bZXAqC
Size: - Virtual size: 5KB

Zo,-ucV@
Size: - Virtual size: 104B

hB.HPsue
Size: - Virtual size: 16B

R=5jsx3i
Size: - Virtual size: 2.7MB

3pu^RHr8
Size: 3KB - Virtual size: 2KB

+DGI-xsD
Size: 7.2MB - Virtual size: 7.2MB

Y[\`m/UB
Size: 512B - Virtual size: 180B

B^9CgFxm
Size: 288KB - Virtual size: 287KB