Behavioral task
behavioral1
Sample
e813b16ac0c38c35f0b7c914a7ddb46b3c703c76934a09ee5586ed4d4802b77b.exe
Resource
win7-20221111-en
General
-
Target
e813b16ac0c38c35f0b7c914a7ddb46b3c703c76934a09ee5586ed4d4802b77b
-
Size
1.5MB
-
MD5
b333d71b20c7eaa210140ab1d0c66244
-
SHA1
7ad18a6f414974efa2f98481261ef2079a3151da
-
SHA256
e813b16ac0c38c35f0b7c914a7ddb46b3c703c76934a09ee5586ed4d4802b77b
-
SHA512
12f1dfffb7b80b4c80a043007d0c6a8bef34a86e6623c4e7774ff26b2556b275607954f1c13f1906cd5d06ca6f363b221ddf2506de3620df8b040e0cd1656e2e
-
SSDEEP
12288:2I4NhC0DaeAtpVxagMU/plruchDofAPAfGg4M9+ayfGg4M9+aZfGg4M9+aM0:ANhNDENvfucVof+tgr+azgr+a8gr+a
Malware Config
Signatures
-
Cybergate family
Files
-
e813b16ac0c38c35f0b7c914a7ddb46b3c703c76934a09ee5586ed4d4802b77b.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.rsrc Size: 99KB - Virtual size: 98KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ