Behavioral task
behavioral1
Sample
b1c25a01bddffc8204edc534a3c1d663505e2b63c72b3fedcf505dae5dbccd35.exe
Resource
win7-20221111-en
General
-
Target
b1c25a01bddffc8204edc534a3c1d663505e2b63c72b3fedcf505dae5dbccd35
-
Size
1.4MB
-
MD5
8db8d81a8e773deb3d6d6201a7460dec
-
SHA1
a7d01d162d1b0f19a2473364f6ef0473012718ab
-
SHA256
b1c25a01bddffc8204edc534a3c1d663505e2b63c72b3fedcf505dae5dbccd35
-
SHA512
0166547989b6aafa23a8423df16a994269c515fdd4a954d87d1fe58bb1b29cfd6516619fbc197aa88c752d18926d7330813847b5ee71b5a07dc8c3d72ccd4d3d
-
SSDEEP
24576:NTwT+BRCZlUXmw21A4eP9NaaLDw8uKJG8xHQZz2735LtwCc26uGi2VCHXSBzTaDQ:JevZlUXVwLO9kgunwHQZALWpYgBzsMsc
Malware Config
Signatures
-
Cybergate family
Files
-
b1c25a01bddffc8204edc534a3c1d663505e2b63c72b3fedcf505dae5dbccd35.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 123KB - Virtual size: 123KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 120KB - Virtual size: 120KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ