Behavioral task
behavioral1
Sample
last crack legendware_v4.exe
Resource
win10-20230703-en
General
-
Target
last crack legendware_v4.exe
-
Size
368KB
-
MD5
af83d4a3f1750e24fb6b920e957deb28
-
SHA1
e93d6f82e6810590ad3448e5e3657ea01dd3e484
-
SHA256
11e3caa6322f6ad10cb40d0bcefabe29e0d800f9bebc1d27b0eeba71e7356636
-
SHA512
c0e00b80947ddbc6ce16ea50385eba7d2eed990d7d414168b96a140ba3afe55c18c004f5580bf10c1909f9154517524ce5742c5a914f2a6a92ad8a2e83cda45f
-
SSDEEP
6144:3hLSjc4wf9DY0oAttIgVXPc3BuTZtA8nFWEFVhEQ90sFXV1klN:xLS6FIgtUxm7A8fFTEUl+
Malware Config
Signatures
-
StormKitty payload 1 IoCs
resource yara_rule sample family_stormkitty -
Stormkitty family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource last crack legendware_v4.exe
Files
-
last crack legendware_v4.exe.exe windows x86
Password: stormkitty
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 336KB - Virtual size: 335KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 31KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ