home

cat goes fishing.exe

Cat Goes Fishing

This is a self-extracting archive and installer. The file has been seen being downloaded from www.bytesendclear.com and multiple other hosts.
Product:
Cat Goes Fishing

Description:
Cat Goes Fishing Setup

MD5:
197239b26185bcf3a4f4162289ec45c5

SHA-1:
d6bf0340753380ad2b940306f0a1ea1bbca249df

SHA-256:
6b89cfd8bdcb8c3c09c1bc8bf3022fb07906aa1d5c4b0576a5f4f58e39a21a48

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/16/2024 12:53:31 AM UTC  (today)

File size:
8 MB (8,343,863 bytes)

Product version:
v1.0u3

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\appdata\local\microsoft\windows\temporary internet files\content.ie5\{random}\cat goes fishing.exe

File PE Metadata
Compilation timestamp:
7/9/2014 9:58:13 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
98304:68IPil/YlVmzTRh6cPrF30J0T19KhJlz2GXKh+dq0fuOHr3SI3ELyQXsyCU8tZXD:6vPil/YlpCTWl2inXf9HWI3cygg/Gy

Entry address:
0x113BC

Entry point:
55, 8B, EC, 83, C4, A4, 53, 56, 57, 33, C0, 89, 45, C4, 89, 45, C0, 89, 45, A4, 89, 45, D0, 89, 45, C8, 89, 45, CC, 89, 45, D4, 89, 45, D8, 89, 45, EC, B8, 2C, 00, 41, 00, E8, E8, 51, FF, FF, 33, C0, 55, 68, 9E, 1A, 41, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, 5A, 1A, 41, 00, 64, FF, 32, 64, 89, 22, A1, 48, 5B, 41, 00, E8, 16, D8, FF, FF, E8, 65, D3, FF, FF, 80, 3D, DC, 2A, 41, 00, 00, 74, 0C, E8, 2B, D9, FF, FF, 33, C0, E8, 80, 32, FF, FF, 8D, 55, EC, 33, C0, E8, E2, A3, FF, FF, 8B, 55, EC, B8, 50, 86...
 
[+]

Developed / compiled with:
Microsoft Visual C++

Code size:
63.5 KB (65,024 bytes)

The file cat goes fishing.exe has been seen being distributed by the following 9 URLs.

http://www.bytesendclear.com/Em8ZJ8 KpEunuNeppdxxKrjmi4D7FVpGOWeq4c98173X_ikaIbgRL6 QpBS_HPXOLSxlS9yV0e75v_zPpHxoa8mSZLyjf rPPBLtCwcLeAIQDovyeaJEM7auGQ_6imMXxhn8jwBK_1Z1tgkLAv9hmWhoE_CR5x6cS5PTvmvXeKX79l0HJOwI8ewDayj1RilA v7eCwif2FfHG0SCHFN4roqcZ rvkjkYlgtU_brdIk3_wXE7K4iCI NZ3k4fu7XYkJaXo9ioiskc41NW7gzFH2kzRxtKQ_FQ38VwAeb9FV jsi TKRM4PRxtoVGW7kEF22xQWdwMxc4mQuUjY_jifINev0gQH6nHMi2OJA37qHTUpwAnrnqtvv5CmDscI5wCuVQSLWdfY2rS0WYLhh6w3qcaPNBoZFnP0ZEbKrSXwD3EiuyPrSB7fy40sTip Nu1c7silhfMA8RncBmsEOiz4fTf5SqtpnSynuBmHkv77ZLRDptVnJu1SgReyMk5uidhmJIin6oFwEVUEg_rILJa9IFe w3bqiyfVuEC YG0rdU6hHWUrfiB6r8Cow8f528iC2dDycvD2ZZA_lriF4yAwmJR04L5GA==-G2EAAGTYtrmEM zbmw4THHLg8F0DiihADCZyAknrct YRWl0LxBDRtQrQ4PIH4gWjvmbl_Dn7zEIth_P4UHdV2r 8EU0GhXLcO3uqTzsyuoVAXsZ

http://s6209.chomikuj.pl/File.aspx?e=UG-NtPOB_WDIwdKr3lCiOLjk6xejCP0X4sfUmjuw_sG-hafIyfYEYLSZflctLksKSnCKyAQSzzqlM-QjqFWhsC3t3J8PcN13ZWESnh32ya9WAIEoij8pz20v7B2YhPOe-QybfNotPfls2-n0WO67L0pFYKC0-nK8JX3q9k7F_yA&pv=2

http://s6209.chomikuj.pl/File.aspx?e=UG-NtPOB_WDIwdKr3lCiOClSAV-n5oaHxmydXOWb-OzW66qLOLMfX0nQciIkaxnMkRVon8ea1yeyfihf-0wAGbpU6N1akMSWBADmwfF-gyS9R1GcWpAbXesL_27tD80x0ieyq9xD0mSAx9dck7mcMQ&pv=2

http://s6209.chomikuj.pl/File.aspx?e=UG-NtPOB_WDIwdKr3lCiOMJP8C9I3PFc2HeG9K2yMx67r4wh0O7hF5_fKx9Vhv0Ui6CdxufQm2OQcsyJlpZ_568r11tsRvSM9P8KTn1ZmhZuJNCsdlLZxWFmGtBGY82CJmWIhGwI2oSTSkANMtk20g&pv=2

http://s6209.chomikuj.pl/File.aspx?e=UG-NtPOB_WDIwdKr3lCiOEwEmbbRLWfgbFw_C6wXTUk_LIprEZFPZuDhFlVstxfpEjPFw-SHS6GRaRZ-31U0SH8_MjqNeDtNX39fu9yYDA_mMTyWxCD1W_4B7lFLNeTTPppCSaQmGfzGGVhMNminPg&pv=2

http://s6209.chomikuj.pl/File.aspx?e=UG-NtPOB_WDIwdKr3lCiONz3W2votuIBSc_aoNVTl7VFCZtENlD41V7WVD6iCzJY7MzM9qV2HKdbQK8Z9Hp8TCY6fCi8qRoTiI7Le7XKqMNhy4Bvy538jpCND40ryJoGZFuruV735V6umdpWPGt9qA&pv=2

http://s6209.chomikuj.pl/File.aspx?e=UG-NtPOB_WDIwdKr3lCiOEwEmbbRLWfgbFw_C6wXTUn1rvqXJQHGOv7Rp1GZhU5QfO4_4UhteJBXhdEn98VWHRcvCVbjUyPsfodAcewmFMSpBEWuwgylAiTJzO_dViaG4zKb1GJx0E77XH5QPKmaXA&pv=2

http://s6209.chomikuj.pl/File.aspx?e=UG-NtPOB_WDIwdKr3lCiOEwEmbbRLWfgbFw_C6wXTUnpllyGi7JawKfW4snSmo-pDvBKd_RjE4lcxx8OTInmCOSp54h8sIa-IcuOCn36w60HeUDvJJIaoLvUVt3W4gDcfn38yfXsSU_6N31uLDfTgrqfyj8ccorvsU16M3hR7l0&pv=2

http://s6209.chomikuj.pl/File.aspx?e=UG-NtPOB_WDIwdKr3lCiOMJP8C9I3PFc2HeG9K2yMx5u9-3ziHmg0WnMahbHxoRooP7sXp_jkUJzUeMtKKR2UCHHxTLvDLG57RSZODufoHuk7_zzUvsrsGPwzjBxM9MSIC0fTqt3PHQgcIbU_Olr0M_VkJeRw4aTvD36edcyO8M&pv=2

Scan cat goes fishing.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.