Behavioral task
behavioral1
Sample
b8ccadd76c933898616018a6a646c41e2e2135a853601eb4111cff065df1abbe.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
b8ccadd76c933898616018a6a646c41e2e2135a853601eb4111cff065df1abbe.exe
Resource
win10v2004-20220901-en
General
-
Target
b8ccadd76c933898616018a6a646c41e2e2135a853601eb4111cff065df1abbe
-
Size
316KB
-
MD5
86752001f97dcc18e31311268475d305
-
SHA1
1a7f3605d4d474d766d0c1475c65fe22d9a46756
-
SHA256
b8ccadd76c933898616018a6a646c41e2e2135a853601eb4111cff065df1abbe
-
SHA512
fae0d1ac0ddd2160c7caff5d6445d6e46faaa47878c8129181211063625222e628025347479b6caa84bf49434561bf84e795059a4db70c3f32106255c6c09e61
-
SSDEEP
6144:gOpslFlqQhdBCkWYxuukP1pjSKSNVkq/MVJb:gwslJTBd47GLRMTb
Malware Config
Signatures
-
Cybergate family
Files
-
b8ccadd76c933898616018a6a646c41e2e2135a853601eb4111cff065df1abbe.exe windows x86
0471d9f3d9f142373524705d6a5cb951
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
MethCallEngine
EVENT_SINK_AddRef
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord100
Sections
.text Size: 308KB - Virtual size: 307KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ