stormkitty | fc27d1096d8335110ebc5cc36a120fe8_JaffaCakes118 | Triage

Sharing

General

Target

fc27d1096d8335110ebc5cc36a120fe8_JaffaCakes118
Size

1.7MB
MD5

fc27d1096d8335110ebc5cc36a120fe8
SHA1

252163d6438ecd73d9c0043331d1f0ad794f0302
SHA256

35d40674e14df03e5ad7b9abb414eb570d7d0ee45f0944239efb5521e4645011
SHA512

6a44c2f1b752f49f2641713783b19d74657bb6e4503019cba449383d7aabced0df50a6b06ec2d2e39e4b99d1d200082c32b8f68c5a8073e38e6d11240390f92f
SSDEEP

49152:g4hrT9FfMwkXLNcbdc2xBJQVdCY7B+sCdRDDo3bo3a:ln9hAXZ/4tpDDoLoq

Score

10^/10

stormkitty

Malware Config

Signatures

StormKitty payload 1 IoCs

resource	yara_rule
sample	family_stormkitty

Stormkitty family
stormkitty

Files

fc27d1096d8335110ebc5cc36a120fe8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

10:6c:e9:46:6d:aa:8d:81:49:6b:f6:fb:6f:a9:4e:ed
Certificate

Issuer

CN=DESKTOP-8LK3LG0\\kurwanator

Not Before

15-06-2021 13:08

Not After

15-06-2022 19:08

Subject

CN=DESKTOP-8LK3LG0\\kurwanator

79:02:33:e5:09:6b:3c:c2:c5:bb:0c:dc:a8:ab:fa:53:cc:d7:7c:d6:5f:41:ed:14:54:c5:ee:68:41:2a:4e:09
Signer

Actual PE Digest

79:02:33:e5:09:6b:3c:c2:c5:bb:0c:dc:a8:ab:fa:53:cc:d7:7c:d6:5f:41:ed:14:54:c5:ee:68:41:2a:4e:09

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\kurwanator\source\repos\kTVCSS-GAMECLIENT\kTVCSS-SGL\obj\Release\kTVCSS-GAMECLIENT.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.7MB - Virtual size: 1.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ