» kitty_image_photo_cute_001.jpg.exe
Overview
Analysis
File Details
Downloads (1)

kitty_image_photo_cute_001.jpg.exe

The executable kitty_image_photo_cute_001.jpg.exe has been detected as malware by 37 anti-virus scanners. The file has been seen being downloaded from www.jakeshotel.com.

File name:

MD5:

b5c7180c03ba5ccabae102a51a916054

SHA-1:

fbc94ae40146a9e77443529e97d81cae9a341781

SHA-256:

4c3260895fc102decd06c6b689d3bd43e591a4cbf492177149a4ff5e1f4f7d17

Scanner detections:

37 / 68

Status:

Malware

Analysis date:

2/25/2025 7:45:39 PM UTC (today)

Scan engine

Detection

Engine version

Lavasoft Ad-Aware

Trojan.GenericKD.1678545

939

Agnitum Outpost

Backdoor.Napolar

7.1.1

AhnLab V3 Security

Trojan/Win32.Necurs

2014.06.17

Avira AntiVirus

TR/TorSolar.A.43

7.11.155.58

avast!

Win32:Trojan-gen

2014.9-140711

AVG

Zbot

2015.0.3417

Baidu Antivirus

Trojan.Win32.Dropper

4.0.3.14711

Bitdefender

Trojan.GenericKD.1678545

1.0.20.960

Comodo Security

UnclassifiedMalware

18575

Dr.Web

Trojan.DownLoad3.32784

9.0.1.0192

Emsisoft Anti-Malware

Trojan.GenericKD.1678545

8.14.07.11.05

ESET NOD32

Win32/Injector.BDRS (variant)

8.9955

Fortinet FortiGate

W32/Krypt.DE!tr

7/11/2014

F-Prot

W32/Trojan2.OEEA

v6.4.7.1.166

F-Secure

Trojan:W32/Agent.DUXE

11.2014-11-07_6

G Data

Trojan.GenericKD.1678545

14.7.24

IKARUS anti.virus

Trojan-Spy.Zbot

t3scan.1.6.1.0

K7 AntiVirus

Trojan

13.1712422

Kaspersky

Backdoor.Win32.Napolar

14.0.0.3579

Malwarebytes

Spyware.ZeuS.GO

v2014.07.11.05

McAfee

PWSZbot-FYZ!B5C7180C03BA

5600.7073

Microsoft Security Essentials

Trojan:Win32/CeeInject

1.10600

MicroWorld eScan

Trojan.GenericKD.1678545

15.0.0.576

NANO AntiVirus

Trojan.Win32.Badur.cxsryi

0.28.0.60253

Norman

Small.SUIJ

11.20140711

nProtect

Trojan.GenericKD.1678545

14.06.16.01

Panda Antivirus

Trj/Downloader.WKY

14.07.11.05

Qihoo 360 Security

Win32/Trojan.Multi.daf

1.0.0.1015

Quick Heal

Backdoor.Napolar.r4

7.14.14.00

Reason Heuristics

Threat.Win.Reputation.IMP

14.7.14.11

Sophos

Mal/Zbot-QU

4.98

Total Defense

Win32/CInject.JLWTUTB

37.0.11003

Trend Micro House Call

TROJ_SPNR.09F414

7.2.192

Trend Micro

TROJ_SPNR.09F414

10.465.11

Vba32 AntiVirus

TrojanSpy.Zbot

3.12.26.0

VIPRE Antivirus

Win32.Malware!Drop

30356

ViRobot

Trojan.Win32.Downloader.90112.GH

2011.4.7.4223

File size:

192 KB (196,608 bytes)

File type:

Executable application (Win32 EXE)

Common path:

C:\users\{user}\downloads\kitty_image_photo_cute_001.jpg.exe

File PE Metadata

Compilation timestamp:

4/30/2014 8:05:42 PM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

11.0

CTPH (ssdeep):

3072:GlkpVDUYo4HYsrJOs5/i2kzDCuwnsjS5xnAJk/V0aTIYOEYLD:7pVDI4gs5/i2WGu88c2Jk+U4EI

Entry address:

0x45DA

Entry point:

55, 8B, EC, 83, EC, 0C, A1, 65, A1, 40, 00, 33, C5, 89, 45, FC, 6A, 06, 8D, 45, F4, 50, 68, 04, 10, 00, 00, FF, 75, 08, C6, 45, FA, 00, E8, 62, FB, FF, FF, 90, 85, C0, 75, 05, 83, C8, FF, EB, 0F, 8D, 45, F4, 50, E8, C3, FD, FF, FF, 59, 8B, 4D, FC, 33, CD, E8, B8, FD, FF, FF, C9, C3, 55, 8B, EC, 83, EC, 34, B8, F8, 49, 42, 00, 33, C5, 8B, D8, 33, C3, EB, 19, 8B, 4D, 18, 89, 45, D8, 8B, 45, 14, 53, 89, 45, D0, 8B, 00, 56, 89, 45, DC, 8B, 45, 08, 57, 33, FF, 83, F8, 00, EB, 18, 90, E9, EC, 2A, 00, 00, 90, 74... 
[+]

Entropy:

7.5687

Developed / compiled with:

Microsoft Visual C++

Code size:

28 KB (28,672 bytes)

The file kitty_image_photo_cute_001.jpg.exe has been seen being distributed by the following URL.

http://www.jakeshotel.com/?raslh08vxvsj1=8433525e1731

Remove kitty_image_photo_cute_001.jpg.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.