cybergate | 694e221d568c1f96fd22fa1a8278b089_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

694e221d568c1f96fd22fa1a8278b089_JaffaCakes118
Size

296KB
MD5

694e221d568c1f96fd22fa1a8278b089
SHA1

32de81e564f05488d6d472d88872f13b92038ef2
SHA256

26edd18c8fefee1e20e0e204d63b9a965e1da5036f156ff6d117f14c4e9edec5
SHA512

ff95868562a17ea0cc04e58ae9250b7ac9828d347a2886c8fd753f3c0032e0a780ffbce72a011223fc06e3f81ec90144d5ee83f111f80c4ee3516bace5f05ccb
SSDEEP

6144:YOpslclqOhdBCkWYxuukP1pjSKSNVkq/MVJbw:Ywsl0TBd47GLRMTbw

Score

10^/10

cybergate

Malware Config

Signatures

Cybergate family
cybergate

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
694e221d568c1f96fd22fa1a8278b089_JaffaCakes118

Files

694e221d568c1f96fd22fa1a8278b089_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 54KB - Virtual size: 54KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 572B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 232KB - Virtual size: 232KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ