Kitty[.]cc free temp[.]rar

Resubmissions

13-10-2024 03:58

241013-ejjbrsyaqb 3

13-10-2024 03:55

241013-egwjbaxhrh 3

Sharing

Copy URL

Twitter E-mail

General

Target

Kitty.cc free temp.rar
Size

1.7MB
MD5

42623dba02536c12bc421f89dad278d6
SHA1

d30a68e15e5200008f24c115e47d3aa5702432b2
SHA256

7d8b06e433c1eb797aaaa5957088a414f0dc8d9cd19302dbd2905df61dedb84b
SHA512

112feb656b7db130738d4cc6cf7586f88c3bc535b2c5cafe731d50852074d7e4ea8939168cc4b18e633bf53b684274d2992d3903db4e4c1c1579ece7cc6b183b
SSDEEP

49152:Ujf88YSEGqHdyjmFgA/gMmO+4S5TIhSzc5O:UjJYSPmgfTImiO

Score

3^/10

Malware Config

Signatures

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
unpack001/sss/Driver.sys
unpack001/sss/kitty.cc temp free.exe

Files

Kitty.cc free temp.rar
.rar
sss/Driver.sys
.sys windows:10 windows x64 arch:x64

873cc78d9dcb27fd62298ecd2f55d33b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\Riley\source\repos\kairand\build\kairand.pdb

Imports

ntoskrnl.exe

strstr
RtlInitUnicodeString
ExAllocatePool
ExAllocatePoolWithTag
ExFreePoolWithTag
ObfDereferenceObject
ZwQuerySystemInformation
ObReferenceObjectByName
IoDriverObjectType

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 168B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

INIT
Size: 512B - Virtual size: 330B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 36B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
sss/README.txt
sss/kitty.cc checkers.bat
sss/kitty.cc temp free.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\xtroas\source\repos\WindowsFormsApp1\WindowsFormsApp1\obj\Release\kitty.cc temp free.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 2.1MB - Virtual size: 2.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 211KB - Virtual size: 211KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Resubmissions

Sharing

General

Malware Config

Signatures

Files

873cc78d9dcb27fd62298ecd2f55d33b

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

ntoskrnl.exe

Sections

.text Size: 3KB - Virtual size: 3KB

.rdata Size: 1KB - Virtual size: 1KB

.data Size: 512B - Virtual size: 16B

.pdata Size: 512B - Virtual size: 168B

INIT Size: 512B - Virtual size: 330B

.reloc Size: 512B - Virtual size: 36B

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

mscoree

Sections

.text Size: 2.1MB - Virtual size: 2.1MB

.rsrc Size: 211KB - Virtual size: 211KB

.reloc Size: 512B - Virtual size: 12B

.text
Size: 3KB - Virtual size: 3KB

.rdata
Size: 1KB - Virtual size: 1KB

.data
Size: 512B - Virtual size: 16B

.pdata
Size: 512B - Virtual size: 168B

INIT
Size: 512B - Virtual size: 330B

.reloc
Size: 512B - Virtual size: 36B

.text
Size: 2.1MB - Virtual size: 2.1MB

.rsrc
Size: 211KB - Virtual size: 211KB

.reloc
Size: 512B - Virtual size: 12B