Static task
static1
Behavioral task
behavioral1
Sample
SafetyKatz.exe
Resource
win10v2004-20231222-en
General
-
Target
SafetyKatz.exe
-
Size
714KB
-
MD5
98d8b7ab238507a2788f2f7862f037e7
-
SHA1
d60423e82c2147275fb2d566327274205d5a9e2a
-
SHA256
89a456943cf6d2b3cd9cdc44f13a23640575435ed49fa754f7ed358c1a3b6ba9
-
SHA512
f254ee49dda2ebb158644eddf3f24cedfb3456d40285e49a11343de1e91ddd2a0facddcff78ec55a7c4181cd08a84600692c4a2688b133419fe1b17344cdb9b6
-
SSDEEP
12288:4TnJ5sF+V3z4WYxZH/ncU5JtepnH5EHLuvj937Odc4kGIOQoEdNutZ:qim0VVdc29t
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource SafetyKatz.exe
Files
-
SafetyKatz.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 711KB - Virtual size: 711KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ