Behavioral task
behavioral1
Sample
CyberGate v3.4.2.2 Cracked/CyberGate v3.4.2.2 Cracked by The Old Warrior/CyberGate_v3.4.2.2 Cracked by The Old Warrior.exe
Resource
win10v2004-20230621-en
General
-
Target
CyberGate v3.4.2.2 Cracked.zip
-
Size
14.7MB
-
MD5
773093cb5a5737e43d1157a4d7e35800
-
SHA1
36d020249272261aa804a2e3277606929ad7d5af
-
SHA256
4b60c647ac9d4582d43c4ca63186258809f380e8e9d7672ca996dbc8c0340f40
-
SHA512
6418380f83ee8f9d87865504baca9179f8c62ae2f794aaa5f68d3061e200a4faec09a758520e96f76bc9fc8cae46fafee7d0a8f66528b27c316cf55daed7179a
-
SSDEEP
393216:fR2PJJQco+AxfT7OeDXKio5MKCww+px1QnK81a+Zfk5b7:fRAUxbfKMPJ+p/QK81a+5K
Malware Config
Extracted
cybergate
v3.4.2.2
remote
127.0.0.1:999
CyberGate1
-
enable_keylogger
true
-
enable_message_box
false
-
ftp_directory
./logs
-
ftp_interval
30
-
injected_process
explorer.exe
-
install_dir
install
-
install_file
server.exe
-
install_flag
true
-
keylogger_enable_ftp
false
-
message_box_caption
Remote Administration anywhere in the world.
-
message_box_title
CyberGate
-
password
cybergate
Signatures
-
Cybergate family
-
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource unpack001/CyberGate v3.4.2.2 Cracked/CyberGate v3.4.2.2 Cracked by The Old Warrior/CyberGate_v3.4.2.2 Cracked by The Old Warrior.exe unpack001/CyberGate v3.4.2.2 Cracked/CyberGate v3.4.2.2 Cracked by The Old Warrior/server.exe
Files
-
CyberGate v3.4.2.2 Cracked.zip.zip
-
CyberGate v3.4.2.2 Cracked/CyberGate v3.4.2.2 Cracked by The Old Warrior/CyberGate_v3.4.2.2 Cracked by The Old Warrior.exe.exe windows x86
5c1fcb72f908a7d84a2c1a763123ff3f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
DeleteCriticalSection
TlsSetValue
lstrlenA
Sleep
user32
GetKeyboardType
CreateWindowExA
advapi32
RegQueryValueExA
RegSetValueExA
oleaut32
SysFreeString
SafeArrayPtrOfIndex
GetErrorInfo
version
VerQueryValueA
gdi32
UnrealizeObject
ole32
CLSIDFromString
OleUninitialize
comctl32
ImageList_SetIconSize
winspool.drv
OpenPrinterA
shell32
Shell_NotifyIconA
SHGetSpecialFolderLocation
wininet
InternetWriteFile
urlmon
IsValidURL
comdlg32
ChooseColorA
wsock32
WSACleanup
winmm
waveOutWrite
msacm32
acmStreamUnprepareHeader
msvcrt
calloc
iphlpapi
GetInterfaceInfo
ws2_32
inet_ntoa
psapi
GetMappedFileNameW
Sections
CODE Size: 15.1MB - Virtual size: 15.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 956KB - Virtual size: 956KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
CyberGate v3.4.2.2 Cracked/CyberGate v3.4.2.2 Cracked by The Old Warrior/GeoIP.dat
-
CyberGate v3.4.2.2 Cracked/CyberGate v3.4.2.2 Cracked by The Old Warrior/Profiles/New Profile.ini
-
CyberGate v3.4.2.2 Cracked/CyberGate v3.4.2.2 Cracked by The Old Warrior/Settings/Settings.ini
-
CyberGate v3.4.2.2 Cracked/CyberGate v3.4.2.2 Cracked by The Old Warrior/Settings/cg.file
-
CyberGate v3.4.2.2 Cracked/CyberGate v3.4.2.2 Cracked by The Old Warrior/Skins/Acryl.asz
-
CyberGate v3.4.2.2 Cracked/CyberGate v3.4.2.2 Cracked by The Old Warrior/Skins/Afterburner.asz
-
CyberGate v3.4.2.2 Cracked/CyberGate v3.4.2.2 Cracked by The Old Warrior/Skins/Air.asz
-
CyberGate v3.4.2.2 Cracked/CyberGate v3.4.2.2 Cracked by The Old Warrior/Skins/Aluminium.asz
-
CyberGate v3.4.2.2 Cracked/CyberGate v3.4.2.2 Cracked by The Old Warrior/Skins/Beijing Ext.asz
-
CyberGate v3.4.2.2 Cracked/CyberGate v3.4.2.2 Cracked by The Old Warrior/Skins/Beijing.asz
-
CyberGate v3.4.2.2 Cracked/CyberGate v3.4.2.2 Cracked by The Old Warrior/Skins/BlueGauze.asz
-
CyberGate v3.4.2.2 Cracked/CyberGate v3.4.2.2 Cracked by The Old Warrior/Skins/BlueGlass.asz
-
CyberGate v3.4.2.2 Cracked/CyberGate v3.4.2.2 Cracked by The Old Warrior/Skins/BlueIce.asz
-
CyberGate v3.4.2.2 Cracked/CyberGate v3.4.2.2 Cracked by The Old Warrior/Skins/BluePlastic.asz
-
CyberGate v3.4.2.2 Cracked/CyberGate v3.4.2.2 Cracked by The Old Warrior/Skins/Calcium.asz
-
CyberGate v3.4.2.2 Cracked/CyberGate v3.4.2.2 Cracked by The Old Warrior/Skins/Cappuccino.asz
-
CyberGate v3.4.2.2 Cracked/CyberGate v3.4.2.2 Cracked by The Old Warrior/Skins/Cold.asz
-
CyberGate v3.4.2.2 Cracked/CyberGate v3.4.2.2 Cracked by The Old Warrior/Skins/DarkGlass.asz
-
CyberGate v3.4.2.2 Cracked/CyberGate v3.4.2.2 Cracked by The Old Warrior/Skins/Deep.asz
-
CyberGate v3.4.2.2 Cracked/CyberGate v3.4.2.2 Cracked by The Old Warrior/Skins/DeepPurple.asz
-
CyberGate v3.4.2.2 Cracked/CyberGate v3.4.2.2 Cracked by The Old Warrior/Skins/Desert.asz
-
CyberGate v3.4.2.2 Cracked/CyberGate v3.4.2.2 Cracked by The Old Warrior/Skins/Elegant.asz
-
CyberGate v3.4.2.2 Cracked/CyberGate v3.4.2.2 Cracked by The Old Warrior/Skins/FalloutStyle.asz
-
CyberGate v3.4.2.2 Cracked/CyberGate v3.4.2.2 Cracked by The Old Warrior/Skins/Garnet.asz
-
CyberGate v3.4.2.2 Cracked/CyberGate v3.4.2.2 Cracked by The Old Warrior/Skins/Golden.asz
-
CyberGate v3.4.2.2 Cracked/CyberGate v3.4.2.2 Cracked by The Old Warrior/Skins/GrayPlastic.asz
-
CyberGate v3.4.2.2 Cracked/CyberGate v3.4.2.2 Cracked by The Old Warrior/Skins/HeroesStyle.asz
-
CyberGate v3.4.2.2 Cracked/CyberGate v3.4.2.2 Cracked by The Old Warrior/Skins/KaraKum.asz
-
CyberGate v3.4.2.2 Cracked/CyberGate v3.4.2.2 Cracked by The Old Warrior/Skins/Ledenets.asz
-
CyberGate v3.4.2.2 Cracked/CyberGate v3.4.2.2 Cracked by The Old Warrior/Skins/LikeOperaStyle.asz
-
CyberGate v3.4.2.2 Cracked/CyberGate v3.4.2.2 Cracked by The Old Warrior/Skins/LongHorn.asz
-
CyberGate v3.4.2.2 Cracked/CyberGate v3.4.2.2 Cracked by The Old Warrior/Skins/Lucky.asz
-
CyberGate v3.4.2.2 Cracked/CyberGate v3.4.2.2 Cracked by The Old Warrior/Skins/MacMetal.asz
-
CyberGate v3.4.2.2 Cracked/CyberGate v3.4.2.2 Cracked by The Old Warrior/Skins/MacOS.asz
-
CyberGate v3.4.2.2 Cracked/CyberGate v3.4.2.2 Cracked by The Old Warrior/Skins/MacOS2.asz
-
CyberGate v3.4.2.2 Cracked/CyberGate v3.4.2.2 Cracked by The Old Warrior/Skins/MetroUI.asz
-
CyberGate v3.4.2.2 Cracked/CyberGate v3.4.2.2 Cracked by The Old Warrior/Skins/Moonlight.asz
-
CyberGate v3.4.2.2 Cracked/CyberGate v3.4.2.2 Cracked by The Old Warrior/Skins/Nautilus.asz
-
CyberGate v3.4.2.2 Cracked/CyberGate v3.4.2.2 Cracked by The Old Warrior/Skins/NeonNight.asz
-
CyberGate v3.4.2.2 Cracked/CyberGate v3.4.2.2 Cracked by The Old Warrior/Skins/Neutral.asz
-
CyberGate v3.4.2.2 Cracked/CyberGate v3.4.2.2 Cracked by The Old Warrior/Skins/Neutral2.asz
-
CyberGate v3.4.2.2 Cracked/CyberGate v3.4.2.2 Cracked by The Old Warrior/Skins/Neutral3.asz
-
CyberGate v3.4.2.2 Cracked/CyberGate v3.4.2.2 Cracked by The Old Warrior/Skins/Neutral4.asz
-
CyberGate v3.4.2.2 Cracked/CyberGate v3.4.2.2 Cracked by The Old Warrior/Skins/NextAlpha.asz
-
CyberGate v3.4.2.2 Cracked/CyberGate v3.4.2.2 Cracked by The Old Warrior/Skins/NextAlpha2.asz
-
CyberGate v3.4.2.2 Cracked/CyberGate v3.4.2.2 Cracked by The Old Warrior/Skins/Office12Style.asz
-
CyberGate v3.4.2.2 Cracked/CyberGate v3.4.2.2 Cracked by The Old Warrior/Skins/Office2003.asz
-
CyberGate v3.4.2.2 Cracked/CyberGate v3.4.2.2 Cracked by The Old Warrior/Skins/Office2007 Black.asz
-
CyberGate v3.4.2.2 Cracked/CyberGate v3.4.2.2 Cracked by The Old Warrior/Skins/Office2007 Blue.asz
-
CyberGate v3.4.2.2 Cracked/CyberGate v3.4.2.2 Cracked by The Old Warrior/Skins/Office2010 Blue.asz
-
CyberGate v3.4.2.2 Cracked/CyberGate v3.4.2.2 Cracked by The Old Warrior/Skins/Opus.asz
-
CyberGate v3.4.2.2 Cracked/CyberGate v3.4.2.2 Cracked by The Old Warrior/Skins/Pulsar.asz
-
CyberGate v3.4.2.2 Cracked/CyberGate v3.4.2.2 Cracked by The Old Warrior/Skins/Retro.asz
-
CyberGate v3.4.2.2 Cracked/CyberGate v3.4.2.2 Cracked by The Old Warrior/Skins/Rhombus.asz
-
CyberGate v3.4.2.2 Cracked/CyberGate v3.4.2.2 Cracked by The Old Warrior/Skins/Sand.asz
-
CyberGate v3.4.2.2 Cracked/CyberGate v3.4.2.2 Cracked by The Old Warrior/Skins/Sapphire.asz
-
CyberGate v3.4.2.2 Cracked/CyberGate v3.4.2.2 Cracked by The Old Warrior/Skins/Shine.asz
-
CyberGate v3.4.2.2 Cracked/CyberGate v3.4.2.2 Cracked by The Old Warrior/Skins/Smoky.asz
-
CyberGate v3.4.2.2 Cracked/CyberGate v3.4.2.2 Cracked by The Old Warrior/Skins/Snow Leopard.asz
-
CyberGate v3.4.2.2 Cracked/CyberGate v3.4.2.2 Cracked by The Old Warrior/Skins/SoapSky - Blue.asz
-
CyberGate v3.4.2.2 Cracked/CyberGate v3.4.2.2 Cracked by The Old Warrior/Skins/SoapSky - Lime.asz
-
CyberGate v3.4.2.2 Cracked/CyberGate v3.4.2.2 Cracked by The Old Warrior/Skins/Steam.asz
-
CyberGate v3.4.2.2 Cracked/CyberGate v3.4.2.2 Cracked by The Old Warrior/Skins/TV-b.asz
-
CyberGate v3.4.2.2 Cracked/CyberGate v3.4.2.2 Cracked by The Old Warrior/Skins/Terminal4bit.asz
-
CyberGate v3.4.2.2 Cracked/CyberGate v3.4.2.2 Cracked by The Old Warrior/Skins/TheFrog.asz
-
CyberGate v3.4.2.2 Cracked/CyberGate v3.4.2.2 Cracked by The Old Warrior/Skins/Topaz.asz
-
CyberGate v3.4.2.2 Cracked/CyberGate v3.4.2.2 Cracked by The Old Warrior/Skins/Ubuntu.asz
-
CyberGate v3.4.2.2 Cracked/CyberGate v3.4.2.2 Cracked by The Old Warrior/Skins/UnderWater.asz
-
CyberGate v3.4.2.2 Cracked/CyberGate v3.4.2.2 Cracked by The Old Warrior/Skins/Vienna Ext.asz
-
CyberGate v3.4.2.2 Cracked/CyberGate v3.4.2.2 Cracked by The Old Warrior/Skins/Vienna.asz
-
CyberGate v3.4.2.2 Cracked/CyberGate v3.4.2.2 Cracked by The Old Warrior/Skins/Vista.asz
-
CyberGate v3.4.2.2 Cracked/CyberGate v3.4.2.2 Cracked by The Old Warrior/Skins/WEB.asz
-
CyberGate v3.4.2.2 Cracked/CyberGate v3.4.2.2 Cracked by The Old Warrior/Skins/WEB2.asz
-
CyberGate v3.4.2.2 Cracked/CyberGate v3.4.2.2 Cracked by The Old Warrior/Skins/WLM.asz
-
CyberGate v3.4.2.2 Cracked/CyberGate v3.4.2.2 Cracked by The Old Warrior/Skins/WMP 2008.asz
-
CyberGate v3.4.2.2 Cracked/CyberGate v3.4.2.2 Cracked by The Old Warrior/Skins/WMP11.asz
-
CyberGate v3.4.2.2 Cracked/CyberGate v3.4.2.2 Cracked by The Old Warrior/Skins/WOT.asz
-
CyberGate v3.4.2.2 Cracked/CyberGate v3.4.2.2 Cracked by The Old Warrior/Skins/Winter2003.asz
-
CyberGate v3.4.2.2 Cracked/CyberGate v3.4.2.2 Cracked by The Old Warrior/Skins/Winter2011.asz
-
CyberGate v3.4.2.2 Cracked/CyberGate v3.4.2.2 Cracked by The Old Warrior/Skins/Wood.asz
-
CyberGate v3.4.2.2 Cracked/CyberGate v3.4.2.2 Cracked by The Old Warrior/Skins/XPLuna.asz
-
CyberGate v3.4.2.2 Cracked/CyberGate v3.4.2.2 Cracked by The Old Warrior/Skins/XPSilver.asz
-
CyberGate v3.4.2.2 Cracked/CyberGate v3.4.2.2 Cracked by The Old Warrior/Skins/iOS4.asz
-
CyberGate v3.4.2.2 Cracked/CyberGate v3.4.2.2 Cracked by The Old Warrior/server.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 35KB - Virtual size: 34KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 512B - Virtual size: 292B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 2KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 386KB - Virtual size: 385KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
CyberGate v3.4.2.2 Cracked/CyberGate v3.4.2.2 Cracked by The Old Warrior/sound.wav