stormkitty | Nj94JMxzf_Protect[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Nj94JMxzf_Protect.exe
Size

1.1MB
MD5

0b8c3b41b3dc48b3cd6e1ebe6f699763
SHA1

096ffac45dc522f6b6eb974446a98df5762cb18b
SHA256

1dddce2793dae95c32b3ef97bcd24bdcf08a04cbc47c8c39ec7fccd0c7356095
SHA512

66dcca5457b6f9b67e9a1910edfb6c28407bbf70f145b8add004bbf6a60e2ab1efbf9587de612c9b3d0ed6501765d0f5e60cebf2450df5351733c813dc7d1f79
SSDEEP

24576:8aHdNXaV9x4IUgs36BUI2So5+jnzFYCaGApu8:80d0T+Sk6BU7HIFY7G98

Score

10^/10

stormkitty

Malware Config

Signatures

StormKitty payload 1 IoCs

resource	yara_rule
sample	family_stormkitty

Stormkitty family
stormkitty

Files

Nj94JMxzf_Protect.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ