Behavioral task
behavioral1
Sample
173041a84f38f3bd419a6993ff06c7c3e53bb763058036d4b25a047e190a50dbexe_JC.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
173041a84f38f3bd419a6993ff06c7c3e53bb763058036d4b25a047e190a50dbexe_JC.exe
Resource
win10v2004-20230703-en
General
-
Target
173041a84f38f3bd419a6993ff06c7c3e53bb763058036d4b25a047e190a50dbexe_JC.exe
-
Size
460KB
-
MD5
c52d61f4527cea4f33072d9261c66e0d
-
SHA1
e04686e3c845fa8dbeea70d2da18585abf4525b4
-
SHA256
173041a84f38f3bd419a6993ff06c7c3e53bb763058036d4b25a047e190a50db
-
SHA512
752d600987c2bac6cd9fb93dc19050b92d504572b32c096f14036904b115b272699eaaab6a2423966bb70aa1c20a264192b76b7149c3bc8f28b77aef6567dbd1
-
SSDEEP
6144:czSo/d5hYVOJ0WTUcrVA+cSJdtyDvU1N/ZZ9wdI4e41R6/I02XCkQSxK8Y+xiSoI:wSpWIEigyY1N/ZZ741RB0FS
Malware Config
Signatures
-
StormKitty payload 1 IoCs
resource yara_rule sample family_stormkitty -
Stormkitty family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 173041a84f38f3bd419a6993ff06c7c3e53bb763058036d4b25a047e190a50dbexe_JC.exe
Files
-
173041a84f38f3bd419a6993ff06c7c3e53bb763058036d4b25a047e190a50dbexe_JC.exe.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 279KB - Virtual size: 278KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 181KB - Virtual size: 180KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ