cybergate | f670e68490aa1ffbd63a91f83c9ed2f6_JaffaCakes118 | Triage

Sharing

General

Target

f670e68490aa1ffbd63a91f83c9ed2f6_JaffaCakes118
Size

292KB
MD5

f670e68490aa1ffbd63a91f83c9ed2f6
SHA1

90824acc40de908bff3f41c460f02f0a039391f3
SHA256

c15972b526a9c7a15c2542773e7ee821c476ebec3ee1d724d37f0766bc842f8d
SHA512

c7da818bbd4bac117f5fbaaed44f448bd78c78fd799f78554da812f5c72e4a6d30a55d3afebc417b8b9fddf330bd7f3c75ab2192edf2187a905a38577b1abb62
SSDEEP

6144:eOpsl3BqPhdBCkWYxuukP1pjSKSNVkq/MVgbbbP:ewslUTBd47GLRMmbbbP

Score

10^/10

cybergate

Malware Config

Signatures

Cybergate family
cybergate

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f670e68490aa1ffbd63a91f83c9ed2f6_JaffaCakes118

Files

f670e68490aa1ffbd63a91f83c9ed2f6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 54KB - Virtual size: 54KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 572B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 225KB - Virtual size: 225KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ