cybergate | be647fe537abd6eb65a521d41dd954d1_JaffaCakes118 | Triage

Sharing

General

Target

be647fe537abd6eb65a521d41dd954d1_JaffaCakes118
Size

283KB
MD5

be647fe537abd6eb65a521d41dd954d1
SHA1

bffd71951f90713fac5bdd714c6dc0d44e577296
SHA256

63a3fc96d708c941e5e58ea1d34210fda4c9e793e13d4bd0e3f263ca32076e99
SHA512

358817e488a0e7710566574264e7b2fdce1c0769fedd4d470701d325fa6b92d5fd9979e9082676b87a93f623c8815f7e666140dea1c9ea3da437169c4a2e4e4b
SSDEEP

6144:N4ABFs4opAuO/50BTnqPd0Mpz7qhh4nXjjf8MZ9BKXK0:WUvGLE0kuGnESB0

Score

10^/10

cybergate

Malware Config

Signatures

Cybergate family
cybergate

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
be647fe537abd6eb65a521d41dd954d1_JaffaCakes118

Files

be647fe537abd6eb65a521d41dd954d1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 44KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 544B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 230KB - Virtual size: 229KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ