cybergate | NEAS[.]407054ba26005d8057ef84a8a2679fe0[.]exe | Triage

Sharing

General

Target

NEAS.407054ba26005d8057ef84a8a2679fe0.exe
Size

324KB
MD5

407054ba26005d8057ef84a8a2679fe0
SHA1

c53d4588b48235ba45fa22dbcf1e919eb5252f02
SHA256

62ee03868b520affc0c392194b9bc2e6695a94955597ca2ddf7bfcf4c3771bca
SHA512

fd49ca6d398795df893d4fbf4fd1fc0f966642c6ba247faf9236be59d86cbdfd4bce34c0f7d8a2561d8e3b28ff2d08001fc2329f8e56c95f9a373547347d3d5c
SSDEEP

6144:POpslplqRhdBCkWYxuukP1pjSKSNVkq/MVJb:PwslWTBd47GLRMTb

Score

10^/10

cybergate

Malware Config

Signatures

Cybergate family
cybergate

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.407054ba26005d8057ef84a8a2679fe0.exe

Files

NEAS.407054ba26005d8057ef84a8a2679fe0.exe
.exe windows:4 windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 54KB - Virtual size: 54KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 572B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 232KB - Virtual size: 232KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ