Behavioral task
behavioral1
Sample
0982da02928063236c393b8aa728d2ff9150e6f24d319deb29fc2fc7ed0818c0.exe
Resource
win7-20220812-en
General
-
Target
0982da02928063236c393b8aa728d2ff9150e6f24d319deb29fc2fc7ed0818c0
-
Size
417KB
-
MD5
9aa6b8dff34aaf1a956c20be95cc2999
-
SHA1
e5ec85ec21f5663e4e548775a38595e25c799770
-
SHA256
0982da02928063236c393b8aa728d2ff9150e6f24d319deb29fc2fc7ed0818c0
-
SHA512
86c8140e36f9a11730c8ca257393493b9199c1c40f9c733e8624e234d725440271bd76ce0b509118974ef88b973dbaa1262c2a9b0d83b1b6c370b82cf0db4584
-
SSDEEP
6144:0icOq5+ZyQmGBzzymcD66RRjs5JGmrpQsK3RD2u270jupCJsCxCT2:0icMoGBfcD663pZ2zkPaCxw
Malware Config
Signatures
-
Cybergate family
Files
-
0982da02928063236c393b8aa728d2ff9150e6f24d319deb29fc2fc7ed0818c0.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 404KB - Virtual size: 403KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ