Behavioral task
behavioral1
Sample
build.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
build.exe
Resource
win10v2004-20250217-en
General
-
Target
build.exe
-
Size
106KB
-
MD5
d4b56c94c65d107090492466856d6245
-
SHA1
65dac4568d8233f0f11897ed6ba6476591b8eb65
-
SHA256
3a6e68deb7f1b02836bc7693f3edda52f67eacc378af82758fd9b034e5119039
-
SHA512
d3a15499509062a9adafc4328f51aefbf2b96eade101b4c24703e60ce3d0792c63a3c5d16e51c36799c48fa64441a2f182f837b9e9d3fb1bda2e1e345ea03adc
-
SSDEEP
1536:U7YfZJRZk79bZn8nESiIkD2V37AUIuvQ7sG69bAdI4pxReUbpxyp6bDQx:U+RZk79Znc4YOWQ7sR9bGpxReUbpYD
Malware Config
Signatures
-
StormKitty payload 1 IoCs
resource yara_rule sample family_stormkitty -
Stormkitty family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource build.exe
Files
-
build.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 104KB - Virtual size: 104KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 880B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ