cybergate | 73653b1ad39f1f2c5ef3a8ad896a2b46d95e800ee89ed6c06a2d5d71da7d8eb5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

73653b1ad39f1f2c5ef3a8ad896a2b46d95e800ee89ed6c06a2d5d71da7d8eb5
Size

609KB
MD5

816bea44a90b52a7e1a9f6286deb4465
SHA1

8848ebfcddb30659b3e4fa38b908253895b12e36
SHA256

73653b1ad39f1f2c5ef3a8ad896a2b46d95e800ee89ed6c06a2d5d71da7d8eb5
SHA512

af08591fe4f3570a20f0cc03b718e67d6e240e5f1a25deb2c9f51b529ff35daa9e9ff9bffc87a05c4e35804a950d6d7638cd59a6d3bbc49e24ca9f16ac021d4b
SSDEEP

6144:parueK31OpslFlqShdBCkWYxuukP1pjSKSNVkq/MVJbjhdBCkWYxuukP1pjSKSNc:IrAwslJTBd47GLRMTbjTBd47GLRMTbH

Score

10^/10

cybergate

Malware Config

Signatures

Cybergate family
cybergate

Files

73653b1ad39f1f2c5ef3a8ad896a2b46d95e800ee89ed6c06a2d5d71da7d8eb5
.exe windows x86

16e6482f755ed54c7b1d5f7f94bd4277

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord626
ord595
ord596
ord522
ord631
ord632
ord526
EVENT_SINK_AddRef
ord528
ord561
DllFunctionCall
ord563
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord607
ord608
ord717
ProcCallEngine
ord537
ord644
ord645
ord648
ord681
ord100
ord617
ord619

Sections

.text
Size: 84KB - Virtual size: 83KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 101KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 296KB - Virtual size: 293KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ