cybergate | 69c2d841c3a75619ddfee65fcd974a6a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

69c2d841c3a75619ddfee65fcd974a6a_JaffaCakes118
Size

1.8MB
MD5

69c2d841c3a75619ddfee65fcd974a6a
SHA1

83792324bb4a41016c2ef265e9769eec7a420297
SHA256

cb121fbbe5e1f333bcc5883aae3cc3eab2db80824b4850f493b127d0e537df49
SHA512

3e8a7d436a29a024f19d504eaa3acb38fb0b9bd21f62d9aac9901e383c690c44cf33e0e87eb4edf1449b3851759602f20c4add5d9365c9d1e77833ec3fa1601e
SSDEEP

49152:o1ww7vQrYVftPDOD8zg8Fw3iI/eRW1Mcd:o1r7v1VftygfkiI/eY1Mcd

Score

10^/10

cybergate

Malware Config

Signatures

Cybergate family
cybergate

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
69c2d841c3a75619ddfee65fcd974a6a_JaffaCakes118

Files

69c2d841c3a75619ddfee65fcd974a6a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

E:\Documents and Settings\End\Desktop\Nathan72389's vb.net source pack\Multi File Binder\multi file binder stub\multi file binder stub\obj\Release\Stub.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 208B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 424KB - Virtual size: 424KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ