cybergate | 2a4369b72dfc1cb6023dfc50e26bc7d8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2a4369b72dfc1cb6023dfc50e26bc7d8_JaffaCakes118
Size

656KB
MD5

2a4369b72dfc1cb6023dfc50e26bc7d8
SHA1

4260194f623c0683e5020fa5dbfe23c73a059d02
SHA256

746740f7cea5ba05418871822ffb659a6e0691c0bc9fa2bb858dece331c580d2
SHA512

763c20ce3bec1d937a7d4506a459df17effb6fa050b7bba5f0fd6c6a9c877e7652301238bb7b0087a06fdba0ee10801361777798332078618b70cbd3e08f065b
SSDEEP

12288:wcD66SGf2GFNT0X8rQvhsEhLLQMoAMHVB66EYAUTS9D/ksSzARJ:wQ2GF+XfvFVLQrBzTaDMsAARJ

Score

10^/10

cybergate

Malware Config

Signatures

Cybergate family
cybergate

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2a4369b72dfc1cb6023dfc50e26bc7d8_JaffaCakes118

Files

2a4369b72dfc1cb6023dfc50e26bc7d8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 44KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 544B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 603KB - Virtual size: 603KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ