Behavioral task
behavioral1
Sample
ae4c473bba717571b03e8dcf308e7dee9c45d29355c8d5e8377a1ae7e1f64284.exe
Resource
win7-20221111-en
General
-
Target
ae4c473bba717571b03e8dcf308e7dee9c45d29355c8d5e8377a1ae7e1f64284
-
Size
2.8MB
-
MD5
5b6e577b5b0efadf1d8e0b2de7a675c1
-
SHA1
6627a6b53bd9a41b188146600b55aad22780efac
-
SHA256
ae4c473bba717571b03e8dcf308e7dee9c45d29355c8d5e8377a1ae7e1f64284
-
SHA512
f90c514326c7a00114e252d93de329159f2976694343a98352eab1d0bd62a080a75bca3edcb68021a61587d324f5fc3d84818ef8ff32d4d795fc7e26b82a70ec
-
SSDEEP
24576:KpiuaZtCk0ynZl8tBkvcbxJJGrJ6ZOklH:KpXdyzukE1pOI
Malware Config
Signatures
-
Cybergate family
Files
-
ae4c473bba717571b03e8dcf308e7dee9c45d29355c8d5e8377a1ae7e1f64284.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.rsrc Size: 22KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 25KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ