Behavioral task
behavioral1
Sample
173671134535f5e0a715ea16af70f2a1b9e8936681eb281a507c745307a7f3a23e054e0193306.dat-decoded.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
173671134535f5e0a715ea16af70f2a1b9e8936681eb281a507c745307a7f3a23e054e0193306.dat-decoded.exe
Resource
win10v2004-20241007-en
General
-
Target
173671134535f5e0a715ea16af70f2a1b9e8936681eb281a507c745307a7f3a23e054e0193306.dat-decoded.exe
-
Size
177KB
-
MD5
ee69e9b3c0a12f8697bfffc71e70ff25
-
SHA1
a33dd046b2a6db721cc089bfe6ce33879de8571b
-
SHA256
3e20baee1c049048cc8b11cf384343ab823eff5e3791af350527c5ec0afe1818
-
SHA512
c43704368d059cbbbfc45b9b68b61b3b46b42f4eaf34f5e00eeb8bb7ef82e3e885fa26fe2303393b4b7f892a4c8b7d386a3a46365b4b4849383a4cd6a0a358f2
-
SSDEEP
3072:GeF86qlmAKww8FSoMyF0GESklfO4SMscomunob2gTnwA/ba+Wpdo:86qltKwwcSoAGE4RMsZnob2AT
Malware Config
Signatures
-
StormKitty payload 1 IoCs
resource yara_rule sample family_stormkitty -
Stormkitty family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 173671134535f5e0a715ea16af70f2a1b9e8936681eb281a507c745307a7f3a23e054e0193306.dat-decoded.exe
Files
-
173671134535f5e0a715ea16af70f2a1b9e8936681eb281a507c745307a7f3a23e054e0193306.dat-decoded.exe.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 172KB - Virtual size: 172KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ