Cats[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Cats.exe
Size

3.6MB
MD5

d1c7d4eb1bff5323843b6a3de96f8968
SHA1

bad403df4978856a5813cb14bbaec17c3349e6e4
SHA256

f9e4562e040f45f27845a75590b858ec87916aa200851350ccc9c5c408a532a5
SHA512

3c337341cc608f03d98268496aa71ff93ccf7b9f9e32c8bcbb64880300ad49344c31a75dfdd01fe956d997ba38d92f3420e0621a438ffd9fca9c3a1de764e995
SSDEEP

98304:pEgNZrEllZlcYcPMP0wh+sfitTK3+CKQhP1zuBG:ugNdcwTwh1f+TKjKwPU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Cats.exe

Files

Cats.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 3.6MB - Virtual size: 3.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ