stormkitty | Stromkitty[.]By[.]otaku_codes[.]rar

Sharing

Copy URL

Twitter E-mail

General

Target

Stromkitty.By.otaku_codes.rar
Size

6.1MB
MD5

3cb13bd98e9698289993b3a0c2d8fea5
SHA1

0a3086f6d2f557c63433e972226bf54357b7d28f
SHA256

ba23be58cb6c4d9aa8cff3e1ee24486ccabec2158dfab3812e42f919812da281
SHA512

fca38d754fe22e5cf71364af49b861d37dbbcc3c9ad30a6aec556398ba5b90998e1831c96d5772903ae1e726e1322ec3a3b0ff9524217e0a0c46ec9e522576f1
SSDEEP

196608:jGTMsa03LVN/iQjBPKypuA8dIQvwyjengYZj+Sr:qMfIDT9uXdI0enVZj+Sr

Score

10^/10

vmprotect stormkitty

Malware Config

Signatures

StormKitty payload 3 IoCs

resource	yara_rule
static1/unpack001/Stromkitty By otaku_codes/StormKittyBuild.exe	family_stormkitty
static1/unpack001/Stromkitty By otaku_codes/StormKittyBuilder.exe	family_stormkitty
static1/unpack001/Stromkitty By otaku_codes/stub/stub.exe	family_stormkitty

Stormkitty family
stormkitty

VMProtect packed file 1 IoCs

Detects executables packed with VMProtect commercial packer.

vmprotect

resource	yara_rule
static1/unpack001/Stromkitty By otaku_codes/stub/AnonFileApi.dll	vmprotect

Unsigned PE 21 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Stromkitty By otaku_codes/Mono.Cecil.Mdb.dll
unpack001/Stromkitty By otaku_codes/Mono.Cecil.Pdb.dll
unpack001/Stromkitty By otaku_codes/Mono.Cecil.Rocks.dll
unpack001/Stromkitty By otaku_codes/Mono.Cecil.dll
unpack001/Stromkitty By otaku_codes/StormKittyBuild.exe
unpack001/Stromkitty By otaku_codes/StormKittyBuilder.exe
unpack001/Stromkitty By otaku_codes/obfuscator/Confuser.CLI.exe
unpack001/Stromkitty By otaku_codes/obfuscator/Confuser.Core.dll
unpack001/Stromkitty By otaku_codes/obfuscator/Confuser.DynCipher.dll
unpack001/Stromkitty By otaku_codes/obfuscator/Confuser.Protections.dll
unpack001/Stromkitty By otaku_codes/obfuscator/Confuser.Renamer.dll
unpack001/Stromkitty By otaku_codes/obfuscator/Confuser.Runtime.dll
unpack001/Stromkitty By otaku_codes/obfuscator/ConfuserEx.exe
unpack001/Stromkitty By otaku_codes/obfuscator/GalaSoft.MvvmLight.Extras.WPF4.dll
unpack001/Stromkitty By otaku_codes/obfuscator/GalaSoft.MvvmLight.WPF4.dll
unpack001/Stromkitty By otaku_codes/obfuscator/Ookii.Dialogs.Wpf.dll
unpack001/Stromkitty By otaku_codes/obfuscator/System.Windows.Interactivity.dll
unpack001/Stromkitty By otaku_codes/obfuscator/dnlib.dll
unpack001/Stromkitty By otaku_codes/stub/AnonFileApi.dll
unpack001/Stromkitty By otaku_codes/stub/DotNetZip.dll
unpack001/Stromkitty By otaku_codes/stub/stub.exe

Files

Stromkitty.By.otaku_codes.rar
.rar

Password: otaku_codes
Stromkitty By otaku_codes/Mono.Cecil.Mdb.dll
.dll windows:4 windows x86 arch:x86

Password: otaku_codes

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\sources\cecil\symbols\mdb\obj\Release\net40\Mono.Cecil.Mdb.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 864B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Stromkitty By otaku_codes/Mono.Cecil.Mdb.pdb
Stromkitty By otaku_codes/Mono.Cecil.Pdb.dll
.dll windows:4 windows x86 arch:x86

Password: otaku_codes

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\sources\cecil\symbols\pdb\obj\Release\net40\Mono.Cecil.Pdb.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 85KB - Virtual size: 84KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 864B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Stromkitty By otaku_codes/Mono.Cecil.Pdb.pdb
Stromkitty By otaku_codes/Mono.Cecil.Rocks.dll
.dll windows:4 windows x86 arch:x86

Password: otaku_codes

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\sources\cecil\rocks\obj\Release\net40\Mono.Cecil.Rocks.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 876B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Stromkitty By otaku_codes/Mono.Cecil.Rocks.pdb
Stromkitty By otaku_codes/Mono.Cecil.dll
.dll windows:4 windows x86 arch:x86

Password: otaku_codes

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\sources\cecil\obj\Release\net40\Mono.Cecil.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 335KB - Virtual size: 334KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 840B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Stromkitty By otaku_codes/Mono.Cecil.pdb
Stromkitty By otaku_codes/StormKittyBuild.exe
.exe windows:4 windows x86 arch:x86

Password: otaku_codes

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 337KB - Virtual size: 336KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Stromkitty By otaku_codes/StormKittyBuilder.exe
.exe windows:4 windows x86 arch:x86

Password: otaku_codes

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\makerofdreams\Downloads\Compressed\Projects\StormKitty-master\Stormkitty\builder\StormKittyBuilder\obj\Debug\StormKittyBuilder.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Stromkitty By otaku_codes/StormKittyBuilder.exe.config
Stromkitty By otaku_codes/StormKittyBuilder.pdb
Stromkitty By otaku_codes/icons/filetypes/3GP.ico
Stromkitty By otaku_codes/icons/filetypes/AC3.ico
Stromkitty By otaku_codes/icons/filetypes/ALAC.ico
Stromkitty By otaku_codes/icons/filetypes/APE.ico
Stromkitty By otaku_codes/icons/filetypes/APK.ico
Stromkitty By otaku_codes/icons/filetypes/AVI.ico
Stromkitty By otaku_codes/icons/filetypes/CUE.ico
Stromkitty By otaku_codes/icons/filetypes/DivX.ico
Stromkitty By otaku_codes/icons/filetypes/EVO.ico
Stromkitty By otaku_codes/icons/filetypes/FLAC.ico
Stromkitty By otaku_codes/icons/filetypes/FLV.ico
Stromkitty By otaku_codes/icons/filetypes/HD.ico
Stromkitty By otaku_codes/icons/filetypes/HDMOV.ico
Stromkitty By otaku_codes/icons/filetypes/JAR.ico
Stromkitty By otaku_codes/icons/filetypes/LOG.ico
Stromkitty By otaku_codes/icons/filetypes/M3U.ico
Stromkitty By otaku_codes/icons/filetypes/M4A.ico
Stromkitty By otaku_codes/icons/filetypes/M4V.ico
Stromkitty By otaku_codes/icons/filetypes/MID.ico
Stromkitty By otaku_codes/icons/filetypes/MIDI.ico
Stromkitty By otaku_codes/icons/filetypes/MKV.ico
Stromkitty By otaku_codes/icons/filetypes/MOV.ico
Stromkitty By otaku_codes/icons/filetypes/MP3.ico
Stromkitty By otaku_codes/icons/filetypes/MP4.ico
Stromkitty By otaku_codes/icons/filetypes/MP4V.ico
Stromkitty By otaku_codes/icons/filetypes/MPEG.ico
Stromkitty By otaku_codes/icons/filetypes/OGG.ico
Stromkitty By otaku_codes/icons/filetypes/OGM.ico
Stromkitty By otaku_codes/icons/filetypes/QT.ico
Stromkitty By otaku_codes/icons/filetypes/REG.ico
Stromkitty By otaku_codes/icons/filetypes/RMVB.ico
Stromkitty By otaku_codes/icons/filetypes/SFW.ico
Stromkitty By otaku_codes/icons/filetypes/SPX.ico
Stromkitty By otaku_codes/icons/filetypes/SWF.ico
Stromkitty By otaku_codes/icons/filetypes/TORRENT.ico
Stromkitty By otaku_codes/icons/filetypes/VOB.ico
Stromkitty By otaku_codes/icons/filetypes/Video-Music.ico
Stromkitty By otaku_codes/icons/filetypes/WAV.ico
Stromkitty By otaku_codes/icons/filetypes/WMA.ico
Stromkitty By otaku_codes/icons/filetypes/WMV.ico
Stromkitty By otaku_codes/icons/filetypes/XviD.ico
Stromkitty By otaku_codes/icons/nord/Accessories.ico
Stromkitty By otaku_codes/icons/nord/Adobe Illustrator.ico
Stromkitty By otaku_codes/icons/nord/Adobe Photoshop.ico
Stromkitty By otaku_codes/icons/nord/Adobe Premiere Pro.ico
Stromkitty By otaku_codes/icons/nord/Adobe.ico
Stromkitty By otaku_codes/icons/nord/App List.ico
Stromkitty By otaku_codes/icons/nord/Apple.ico
Stromkitty By otaku_codes/icons/nord/Book.ico
Stromkitty By otaku_codes/icons/nord/CD.ico
Stromkitty By otaku_codes/icons/nord/Chrome.ico
Stromkitty By otaku_codes/icons/nord/Clock 2.ico
Stromkitty By otaku_codes/icons/nord/Clock.ico
Stromkitty By otaku_codes/icons/nord/Colors.ico
Stromkitty By otaku_codes/icons/nord/Desktop.ico
Stromkitty By otaku_codes/icons/nord/Development.ico
Stromkitty By otaku_codes/icons/nord/Downloads 2.ico
Stromkitty By otaku_codes/icons/nord/Downloads.ico
Stromkitty By otaku_codes/icons/nord/Ffile-manager.ico
Stromkitty By otaku_codes/icons/nord/Folder - 3D.ico
Stromkitty By otaku_codes/icons/nord/Folder - Contacts.ico
Stromkitty By otaku_codes/icons/nord/Folder - Documents.ico
Stromkitty By otaku_codes/icons/nord/Folder - Downloads.ico
Stromkitty By otaku_codes/icons/nord/Folder - Favorites.ico
.ps1
Stromkitty By otaku_codes/icons/nord/Folder - Games.ico
Stromkitty By otaku_codes/icons/nord/Folder - Generic.ico
Stromkitty By otaku_codes/icons/nord/Folder - Links.ico
Stromkitty By otaku_codes/icons/nord/Folder - Music.ico
Stromkitty By otaku_codes/icons/nord/Folder - Onedrive.ico
Stromkitty By otaku_codes/icons/nord/Folder - Pictures.ico
Stromkitty By otaku_codes/icons/nord/Folder - Projects.ico
Stromkitty By otaku_codes/icons/nord/Folder - Searches.ico
Stromkitty By otaku_codes/icons/nord/Folder - User.ico
Stromkitty By otaku_codes/icons/nord/Folder - Videos.ico
Stromkitty By otaku_codes/icons/nord/Foobar2000.ico
Stromkitty By otaku_codes/icons/nord/Ghost.ico
Stromkitty By otaku_codes/icons/nord/Globe 2.ico
Stromkitty By otaku_codes/icons/nord/Globe.ico
Stromkitty By otaku_codes/icons/nord/Heart.ico
Stromkitty By otaku_codes/icons/nord/Help.ico
Stromkitty By otaku_codes/icons/nord/Library.ico
Stromkitty By otaku_codes/icons/nord/Mail.ico
Stromkitty By otaku_codes/icons/nord/Media Player.ico
Stromkitty By otaku_codes/icons/nord/Microsoft_Edge.ico
Stromkitty By otaku_codes/icons/nord/Movies.ico
Stromkitty By otaku_codes/icons/nord/Music v2.ico
Stromkitty By otaku_codes/icons/nord/Music.ico
Stromkitty By otaku_codes/icons/nord/Office.ico
Stromkitty By otaku_codes/icons/nord/Pacman.ico
Stromkitty By otaku_codes/icons/nord/Paint palette.ico
Stromkitty By otaku_codes/icons/nord/Paint.ico
Stromkitty By otaku_codes/icons/nord/Photo.ico
Stromkitty By otaku_codes/icons/nord/Photos.ico
Stromkitty By otaku_codes/icons/nord/Pictures.ico
Stromkitty By otaku_codes/icons/nord/PotPlayer.ico
Stromkitty By otaku_codes/icons/nord/PotPlayerOrange.ico
Stromkitty By otaku_codes/icons/nord/Private.ico
Stromkitty By otaku_codes/icons/nord/Settings.ico
Stromkitty By otaku_codes/icons/nord/Spotify.ico
Stromkitty By otaku_codes/icons/nord/Terminal.ico
Stromkitty By otaku_codes/icons/nord/User.ico
Stromkitty By otaku_codes/icons/nord/Videos.ico
Stromkitty By otaku_codes/icons/nord/WebCam.ico
Stromkitty By otaku_codes/icons/nord/alarm.ico
Stromkitty By otaku_codes/icons/nord/atunes.ico
Stromkitty By otaku_codes/icons/nord/audacity.ico
Stromkitty By otaku_codes/icons/nord/bitwarden.ico
Stromkitty By otaku_codes/icons/nord/blender_1.ico
Stromkitty By otaku_codes/icons/nord/brave.ico
Stromkitty By otaku_codes/icons/nord/chromium-browser.ico
Stromkitty By otaku_codes/icons/nord/color-picker.ico
Stromkitty By otaku_codes/icons/nord/computer.ico
Stromkitty By otaku_codes/icons/nord/computerjanitor.ico
Stromkitty By otaku_codes/icons/nord/deepin-draw.ico
Stromkitty By otaku_codes/icons/nord/deepin-movie.ico
Stromkitty By otaku_codes/icons/nord/deviantart.ico
Stromkitty By otaku_codes/icons/nord/discord.ico
Stromkitty By otaku_codes/icons/nord/distributor-logo-archlinux.ico
Stromkitty By otaku_codes/icons/nord/distributor-logo-windows.ico
Stromkitty By otaku_codes/icons/nord/dockbar.ico
Stromkitty By otaku_codes/icons/nord/dockstation.ico
Stromkitty By otaku_codes/icons/nord/drive-harddisk.ico
Stromkitty By otaku_codes/icons/nord/dropbox.ico
Stromkitty By otaku_codes/icons/nord/electrip.ico
Stromkitty By otaku_codes/icons/nord/fbmessenger.ico
Stromkitty By otaku_codes/icons/nord/firefox.ico
Stromkitty By otaku_codes/icons/nord/gimp.ico
Stromkitty By otaku_codes/icons/nord/github.ico
Stromkitty By otaku_codes/icons/nord/gitkraken.ico
Stromkitty By otaku_codes/icons/nord/gitlab.ico
Stromkitty By otaku_codes/icons/nord/gtranscribe.ico
Stromkitty By otaku_codes/icons/nord/inkscape.ico
Stromkitty By otaku_codes/icons/nord/itunes.ico
Stromkitty By otaku_codes/icons/nord/jewel.ico
Stromkitty By otaku_codes/icons/nord/mac dark.ico
Stromkitty By otaku_codes/icons/nord/mac light.ico
Stromkitty By otaku_codes/icons/nord/microsoft teams.ico
Stromkitty By otaku_codes/icons/nord/microsoft.ico
Stromkitty By otaku_codes/icons/nord/movie.ico
Stromkitty By otaku_codes/icons/nord/ms-excel.ico
Stromkitty By otaku_codes/icons/nord/ms-onedrive.ico
Stromkitty By otaku_codes/icons/nord/ms-powerpoint.ico
Stromkitty By otaku_codes/icons/nord/ms-word.ico
Stromkitty By otaku_codes/icons/nord/music-player.ico
Stromkitty By otaku_codes/icons/nord/netflix.ico
Stromkitty By otaku_codes/icons/nord/nextcloud.ico
Stromkitty By otaku_codes/icons/nord/opera.ico
Stromkitty By otaku_codes/icons/nord/powershell.ico
Stromkitty By otaku_codes/icons/nord/powersploit.ico
Stromkitty By otaku_codes/icons/nord/preferences-desktop-color.ico
Stromkitty By otaku_codes/icons/nord/preferences-desktop-gaming.ico
Stromkitty By otaku_codes/icons/nord/preferences.ico
Stromkitty By otaku_codes/icons/nord/qbittorrent.ico
Stromkitty By otaku_codes/icons/nord/reddit.ico
Stromkitty By otaku_codes/icons/nord/shutdown v2.ico
Stromkitty By otaku_codes/icons/nord/shutdown.ico
Stromkitty By otaku_codes/icons/nord/slack.ico
Stromkitty By otaku_codes/icons/nord/spotify alt.ico
Stromkitty By otaku_codes/icons/nord/steam.ico
Stromkitty By otaku_codes/icons/nord/system-users.ico
Stromkitty By otaku_codes/icons/nord/telegram.ico
Stromkitty By otaku_codes/icons/nord/tweak-tool.ico
Stromkitty By otaku_codes/icons/nord/uTorrent.ico
Stromkitty By otaku_codes/icons/nord/user-trash-full.ico
Stromkitty By otaku_codes/icons/nord/user-trash.ico
Stromkitty By otaku_codes/icons/nord/utilities-terminal.ico
Stromkitty By otaku_codes/icons/nord/virtualbox (2).ico
Stromkitty By otaku_codes/icons/nord/virtualbox.ico
Stromkitty By otaku_codes/icons/nord/visual-studio-code.ico
Stromkitty By otaku_codes/icons/nord/vivaldi.ico
Stromkitty By otaku_codes/icons/nord/vlc.ico
Stromkitty By otaku_codes/icons/nord/vmware-workstation.ico
Stromkitty By otaku_codes/icons/nord/windows.ico
Stromkitty By otaku_codes/icons/nord/words.ico
Stromkitty By otaku_codes/icons/nord/yandex-browser.ico
Stromkitty By otaku_codes/icons/nord/yast.ico
Stromkitty By otaku_codes/icons/nord/youtube-dl.ico
Stromkitty By otaku_codes/icons/nord/youtube.ico
Stromkitty By otaku_codes/obfuscator/Confuser.CLI.exe
.exe windows:4 windows x86 arch:x86

Password: otaku_codes

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

e:\Source\Public\Confuser2\Confuser.CLI\obj\Release\Confuser.CLI.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Stromkitty By otaku_codes/obfuscator/Confuser.CLI.pdb
Stromkitty By otaku_codes/obfuscator/Confuser.Core.dll
.dll windows:4 windows x86 arch:x86

Password: otaku_codes

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

e:\Source\Public\Confuser2\Confuser.Core\obj\Release\Confuser.Core.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 177KB - Virtual size: 176KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 936B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Stromkitty By otaku_codes/obfuscator/Confuser.Core.pdb
Stromkitty By otaku_codes/obfuscator/Confuser.Core.xml
.xml
Stromkitty By otaku_codes/obfuscator/Confuser.DynCipher.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

e:\Source\Public\Confuser2\Confuser.DynCipher\obj\Release\Confuser.DynCipher.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Stromkitty By otaku_codes/obfuscator/Confuser.DynCipher.pdb
Stromkitty By otaku_codes/obfuscator/Confuser.Protections.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

e:\Source\Public\Confuser2\Confuser.Protections\obj\Release\Confuser.Protections.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 126KB - Virtual size: 125KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Stromkitty By otaku_codes/obfuscator/Confuser.Protections.pdb
Stromkitty By otaku_codes/obfuscator/Confuser.Renamer.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

e:\Source\Public\Confuser2\Confuser.Renamer\obj\Release\Confuser.Renamer.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 301KB - Virtual size: 300KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 968B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Stromkitty By otaku_codes/obfuscator/Confuser.Renamer.pdb
Stromkitty By otaku_codes/obfuscator/Confuser.Runtime.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

e:\Source\Public\Confuser2\Confuser.Runtime\obj\Release\Confuser.Runtime.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 960B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Stromkitty By otaku_codes/obfuscator/Confuser.Runtime.pdb
Stromkitty By otaku_codes/obfuscator/ConfuserEx.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

e:\Source\Public\Confuser2\ConfuserEx\obj\Release\ConfuserEx.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 347KB - Virtual size: 347KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 39KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Stromkitty By otaku_codes/obfuscator/ConfuserEx.exe.config
.xml
Stromkitty By otaku_codes/obfuscator/ConfuserEx.pdb
Stromkitty By otaku_codes/obfuscator/GalaSoft.MvvmLight.Extras.WPF4.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\Users\Laurent\AppData\Local\Temp\vs98F2.tmp\Release\GalaSoft.MvvmLight.Extras.WPF4.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Stromkitty By otaku_codes/obfuscator/GalaSoft.MvvmLight.WPF4.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

d:\GalaSoft\mydotnet\MvvmLight\Source\GalaSoft.MvvmLight\GalaSoft.MvvmLight (NET4)\obj\Release\GalaSoft.MvvmLight.WPF4.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Stromkitty By otaku_codes/obfuscator/Microsoft.Practices.ServiceLocation.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

33:00:00:00:33:e5:27:86:a3:0e:4a:2a:80:00:00:00:00:00:33
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

27-03-2013 20:08

Not After

27-06-2014 20:08

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:F528-3777-8A76,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

33:00:00:00:b0:11:af:0a:8b:d0:3b:9f:dd:00:01:00:00:00:b0
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

24-01-2013 22:33

Not After

24-04-2014 22:33

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31-08-2010 22:19

Not After

31-08-2020 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03-04-2007 12:53

Not After

03-04-2021 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

cd:22:fe:05:fc:8b:ec:8a:ef:4e:ee:cf:cf:07:ef:3d:35:f5:93:ec
Signer

Actual PE Digest

cd:22:fe:05:fc:8b:ec:8a:ef:4e:ee:cf:cf:07:ef:3d:35:f5:93:ec

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\Projects\CommonServiceLocator\main\Microsoft.Practices.ServiceLocation.PortableClassLibrary\obj\Release\Microsoft.Practices.ServiceLocation.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Stromkitty By otaku_codes/obfuscator/Ookii.Dialogs.Wpf.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

e:\Source\Public\Confuser2\Confuser.Test\Release\src\Ookii.Dialogs.Wpf\obj\Release\Ookii.Dialogs.Wpf.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 99KB - Virtual size: 99KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Stromkitty By otaku_codes/obfuscator/System.Threading.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

61:08:77:5f:00:00:00:00:00:4a
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

19-07-2010 22:53

Not After

19-10-2011 22:53

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:04:b3:f5:00:00:00:00:00:0d
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25-07-2008 19:13

Not After

25-07-2011 19:23

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:9E78-864B-039D,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03-04-2007 12:53

Not After

03-04-2021 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:15:08:27:00:00:00:00:00:0c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

25-01-2006 23:22

Not After

25-01-2017 23:32

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign

a6:e9:10:6c:8a:b6:b5:78:02:56:c2:cf:c8:c4:e9:27:bb:ec:f4:fc
Signer

Actual PE Digest

a6:e9:10:6c:8a:b6:b5:78:02:56:c2:cf:c8:c4:e9:27:bb:ec:f4:fc

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

d:\cp\main\built\Release\Temp\86167f787584e42c25873494b6be9c\System.Threading.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 369KB - Virtual size: 369KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Stromkitty By otaku_codes/obfuscator/System.Windows.Interactivity.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

e:\ExpressionRTM\Sparkle\SDK\BlendWPFSDK\Build\Intermediate\Release\Libraries\System.Windows.Interactivity\Win32\Release\System.Windows.Interactivity.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Stromkitty By otaku_codes/obfuscator/dnlib.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

E:\Source\Public\Confuser2\dnlib\src\obj\Release\dnlib.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 985KB - Virtual size: 984KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 896B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Stromkitty By otaku_codes/obfuscator/dnlib.pdb
Stromkitty By otaku_codes/obfuscator/dnlib.xml
.xml
Stromkitty By otaku_codes/stub/AnonFileApi.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.vmp0
Size: - Virtual size: 182KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.vmp1
Size: 291KB - Virtual size: 290KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 904B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Stromkitty By otaku_codes/stub/AnonFileApi.pdb
Stromkitty By otaku_codes/stub/DotNetZip.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\projects\dotnetzip-semverd\src\Zip\obj\Release\DotNetZip.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 446KB - Virtual size: 445KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 932B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Stromkitty By otaku_codes/stub/DotNetZip.pdb
Stromkitty By otaku_codes/stub/DotNetZip.xml
.js .xml polyglot
Stromkitty By otaku_codes/stub/Newtonsoft.Json.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

06:ce:e1:31:be:6d:55:c8:07:f7:c0:c7:fb:44:e6:20
Certificate

Issuer

CN=DigiCert CS RSA4096 Root G5,O=DigiCert\, Inc.,C=US

Not Before

15-01-2021 00:00

Not After

14-01-2046 23:59

Subject

CN=DigiCert CS RSA4096 Root G5,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0a:de:32:e9:50:9b:44:aa:34:b1:da:f1:bc:0e:c8:73
Certificate

Issuer

CN=DigiCert CS RSA4096 Root G5,O=DigiCert\, Inc.,C=US

Not Before

15-07-2021 00:00

Not After

14-07-2031 23:59

Subject

CN=.NET Foundation Projects Code Signing CA2,O=.NET Foundation,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0c:d1:40:7a:5a:bd:ed:43:d5:c1:73:12:1d:38:c5:29
Certificate

Issuer

CN=.NET Foundation Projects Code Signing CA2,O=.NET Foundation,C=US

Not Before

13-08-2021 00:00

Not After

29-10-2024 23:59

Subject

SERIALNUMBER=603 389 068,CN=Json.NET (.NET Foundation),O=Json.NET (.NET Foundation),L=Redmond,ST=Washington,C=US,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

21-09-2022 00:00

Not After

21-11-2033 23:59

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23-03-2022 00:00

Not After

22-03-2037 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01-08-2022 00:00

Not After

09-11-2031 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

08:f5:23:20:fd:04:a7:f1:61:5b:e7:54:5e:c3:99:a9:5b:ac:e0:a4:00:0f:c0:61:76:d2:53:e2:a5:39:8e:27
Signer

Actual PE Digest

08:f5:23:20:fd:04:a7:f1:61:5b:e7:54:5e:c3:99:a9:5b:ac:e0:a4:00:0f:c0:61:76:d2:53:e2:a5:39:8e:27

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

/_/Src/Newtonsoft.Json/obj/Release/net40/Newtonsoft.Json.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 557KB - Virtual size: 556KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Stromkitty By otaku_codes/stub/Newtonsoft.Json.xml
.xml
Stromkitty By otaku_codes/stub/StormKitty.exe.config
.xml
Stromkitty By otaku_codes/stub/StormKitty.pdb
Stromkitty By otaku_codes/stub/stub.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\makerofdreams\Downloads\Compressed\Projects\StormKitty-master\StormKitty\stub\Neko\obj\Debug\StormKitty.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 143KB - Virtual size: 142KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 31KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Password: otaku_codes

Password: otaku_codes

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

mscoree

Sections

.text Size: 40KB - Virtual size: 39KB

.rsrc Size: 1024B - Virtual size: 864B

.reloc Size: 512B - Virtual size: 12B

Password: otaku_codes

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

mscoree

Sections

.text Size: 85KB - Virtual size: 84KB

.rsrc Size: 1024B - Virtual size: 864B

.reloc Size: 512B - Virtual size: 12B

Password: otaku_codes

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

mscoree

Sections

.text Size: 25KB - Virtual size: 24KB

.rsrc Size: 1024B - Virtual size: 876B

.reloc Size: 512B - Virtual size: 12B

Password: otaku_codes

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

mscoree

Sections

.text Size: 335KB - Virtual size: 334KB

.rsrc Size: 1024B - Virtual size: 840B

.reloc Size: 512B - Virtual size: 12B

Password: otaku_codes

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 337KB - Virtual size: 336KB

.rsrc Size: 28KB - Virtual size: 27KB

.reloc Size: 512B - Virtual size: 12B

Password: otaku_codes

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

mscoree

Sections

.text Size: 16KB - Virtual size: 16KB

.rsrc Size: 23KB - Virtual size: 22KB

.reloc Size: 512B - Virtual size: 12B

Password: otaku_codes

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

.text
Size: 40KB - Virtual size: 39KB

.rsrc
Size: 1024B - Virtual size: 864B

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 85KB - Virtual size: 84KB

.rsrc
Size: 1024B - Virtual size: 864B

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 25KB - Virtual size: 24KB

.rsrc
Size: 1024B - Virtual size: 876B

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 335KB - Virtual size: 334KB

.rsrc
Size: 1024B - Virtual size: 840B

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 337KB - Virtual size: 336KB

.rsrc
Size: 28KB - Virtual size: 27KB

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 16KB - Virtual size: 16KB

.rsrc
Size: 23KB - Virtual size: 22KB

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 25KB - Virtual size: 25KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 177KB - Virtual size: 176KB

.rsrc
Size: 1024B - Virtual size: 936B

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 44KB - Virtual size: 43KB

.rsrc
Size: 1024B - Virtual size: 1000B

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 126KB - Virtual size: 125KB

.rsrc
Size: 1024B - Virtual size: 1000B

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 301KB - Virtual size: 300KB

.rsrc
Size: 1024B - Virtual size: 968B

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 40KB - Virtual size: 39KB

.rsrc
Size: 1024B - Virtual size: 960B

.reloc
Size: 512B - Virtual size: 12B