CatGirlClicker[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
CatGirlClicker.exe
Size 749KB
Sample260708-n69lxae19s
SHA256 7c33fab6d7a9c128378532b81d171b0c856e6b10cc75c8068484838ae79eafee
MD5 e117f22ad4c8396da300793d854abb87
SHA1 7a338f1d7a3b4c36de47ec24e3287e81691023a5
SHA512 288eb2634d7bfb9a1cc371ba86129d54b06223639fe502d578f9ed02206c3241b85ec6613ba6ac9092a48dd80bae6f14a8ee62d7078821d980bbc1a9943755d9
SSDEEP 12288:tTr+jn3evpZPKxpFUYb7Tlx/84ZoDRA+aaV2uJBWXZuWC/+88P5CMf4:HjPKNZbFx1ZolAdacuJBWJJRR
TLSH
T19CF4E015E6A000FEE0B78679CAA34D42D772BC4607B0D6CB23A05A957F376E49E3E711
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
CatGirlClicker.exe

File Explorer

CatGirlClicker.exe

.exe 749KB

CatGirlClicker.exe

IMPHASH 9daf735e73a90ac6b4c3a07c55f289b6
SHA256 7c33fab6d7a9c128378532b81d171b0c856e6b10cc75c8068484838ae79eafee
MD5 e117f22ad4c8396da300793d854abb87
SHA1 7a338f1d7a3b4c36de47ec24e3287e81691023a5
SHA512 288eb2634d7bfb9a1cc371ba86129d54b06223639fe502d578f9ed02206c3241b85ec6613ba6ac9092a48dd80bae6f14a8ee62d7078821d980bbc1a9943755d9
SSDEEP 12288:tTr+jn3evpZPKxpFUYb7Tlx/84ZoDRA+aaV2uJBWXZuWC/+88P5CMf4:HjPKNZbFx1ZolAdacuJBWJJRR
TLSH
T19CF4E015E6A000FEE0B78679CAA34D42D772BC4607B0D6CB23A05A957F376E49E3E711
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

96664

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

gdiplus

GdipGraphicsClear GdipFree GdiplusStartup GdipMeasureString GdipDrawString GdipDeleteFont GdipCreateFont GdipDeleteFontFamily GdipCreateFontFamilyFromName GdipDrawImageRectI GdipDrawImageRect GdipDrawImageI GdipFillEllipseI GdipFillRectangleI GdipAlloc GdipDrawRectangleI GdipSetInterpolationMode GdipSetTextRenderingHint GdipSetSmoothingMode GdipDeleteGraphics GdipCreateFromHWND GdipCreateFromHDC GdipCreateBitmapFromHICON GdipCreateBitmapFromScan0 GdipGetImageGraphicsContext GdipDisposeImage GdipCloneImage GdipLoadImageFromFileICM GdipLoadImageFromFile GdipLoadImageFromStream GdipDeletePen GdipCreatePen1 GdipSetSolidFillColor GdipCreateSolidFill GdipCreateTexture GdipDeleteBrush GdipCloneBrush GdiplusShutdown

advapi32

OpenProcessToken GetTokenInformation

shlwapi

PathAppendW PathRemoveFileSpecW

winmm

timeBeginPeriod timeEndPeriod

user32

EndPaint SetCursor BeginPaint UpdateWindow MessageBoxW InvalidateRect GetMessageA TranslateMessage ReleaseCapture SendMessageA DefWindowProcA PostQuitMessage RegisterClassExW CreateWindowExW DestroyWindow ShowWindow SetLayeredWindowAttributes GetCursorPos ScreenToClient LoadCursorA MapVirtualKeyW GetSystemMetrics GetKeyNameTextW DispatchMessageA SetCapture SetFocus GetWindowThreadProcessId EnumWindows GetWindowTextW GetWindowTextA SetWindowTextW GetDlgItemTextW SetDlgItemTextW EndDialog DialogBoxIndirectParamW GetForegroundWindow SendInput GetAsyncKeyState LoadImageW DestroyIcon LoadImageA

shell32

ShellExecuteW ShellExecuteExW SHGetFolderPathW

version

GetFileVersionInfoA VerQueryValueA GetFileVersionInfoSizeA

ole32

CreateStreamOnHGlobal

comdlg32

GetOpenFileNameW ChooseColorW

ws2_32

bind closesocket htons accept recv WSACleanup setsockopt socket listen send WSAStartup

winhttp

WinHttpCloseHandle WinHttpConnect WinHttpOpen WinHttpCrackUrl WinHttpQueryDataAvailable WinHttpOpenRequest WinHttpAddRequestHeaders WinHttpReceiveResponse WinHttpSendRequest WinHttpReadData

kernel32

HeapSize GetConsoleMode GetConsoleOutputCP FlushFileBuffers GetStringTypeW SetStdHandle GetProcessHeap FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW GetCommandLineA GetCPInfo GetOEMCP GetACP IsValidCodePage FindNextFileW FindFirstFileExW FindClose SetFilePointerEx GetFileSizeEx GetFileType LCMapStringW LoadLibraryExW VirtualProtect HeapReAlloc SetEndOfFile ReadFile HeapFree HeapAlloc UnhandledExceptionFilter IsDebuggerPresent RtlVirtualUnwind RtlCaptureContext GetStdHandle ReadConsoleW GetProcAddress ExitProcess GetModuleHandleExW FreeLibraryAndExitThread FreeLibrary ExitThread DeleteCriticalSection InitializeCriticalSectionEx LeaveCriticalSection EnterCriticalSection EncodePointer FlsFree FlsSetValue FlsGetValue FlsAlloc SetLastError RtlUnwindEx RtlLookupFunctionEntry RaiseException RtlPcToFileHeader InitializeSListHead GetSystemTimeAsFileTime GetStartupInfoW SetUnhandledExceptionFilter WakeAllConditionVariable SleepConditionVariableSRW TryAcquireSRWLockExclusive AcquireSRWLockExclusive ReleaseSRWLockExclusive GetExitCodeThread GetCurrentThreadId WaitForSingleObjectEx GetLastError GetSystemTimePreciseAsFileTime QueryPerformanceFrequency QueryPerformanceCounter GetCurrentProcessId WriteProcessMemory WriteConsoleW IsProcessorFeaturePresent GetTickCount VirtualProtectEx FlushInstructionCache Module32NextW Module32FirstW WritePrivateProfileStringW GetPrivateProfileStringW GetPrivateProfileIntW Process32NextW Process32FirstW CreateToolhelp32Snapshot WideCharToMultiByte MultiByteToWideChar QueryFullProcessImageNameA lstrcmpiW GlobalFree GetModuleHandleA ReadProcessMemory VirtualQueryEx TerminateProcess GetTempPathW WriteFile DeleteFileW CloseHandle Sleep GetCurrentProcess GetExitCodeProcess OpenProcess GetTickCount64 GetModuleFileNameW GetFileAttributesW GetModuleHandleW LoadResource LockResource SizeofResource GlobalAlloc GlobalUnlock GlobalLock FindResourceA WaitForSingleObject CreateThread CreateDirectoryW CreateFileW

Name

.text

Size

225KB

Virtual Size

225KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

83KB

Virtual Size

82KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

4KB

Virtual Size

13KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

9KB

Virtual Size

9KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

423KB

Virtual Size

422KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

CatGirlClicker.exe

gdiplus

advapi32

shlwapi

winmm

user32

shell32

version

ole32

comdlg32

ws2_32

winhttp

kernel32

generic