Driver Talent Pro[.]exe | Triage

Sharing

General

Target

Driver Talent Pro.exe
Size

91KB
MD5

f167172584f7f3ec3031a4466849b7ac
SHA1

b4fddc09e6af50cdf6c0f9da4345dbca9a6bba97
SHA256

a7de3f00dfb9ba786eb5c6358692a605465aa2ca1b3c25e46c31f33a7fdaa6b4
SHA512

eab4a2a2a2ca8130b9a212606165d2f52b018d26667e3e616665bbae314193bda3dd0c3673fba36972fc72114e5cd7db903c948d0573bbb742891f6359d58664
SSDEEP

768:am8ApqdKUn3XonzoPAXVoNYykBLEioil3Dm0pMcwVYbmBZhmKmNvlI91K+F4M2ae:XzMT3qHykiA3DxpMFamjo1Eo+WamVbz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs
Checks for missing Authenticode signature.

Processes:

resource

Driver Talent Pro.exe

Files

Driver Talent Pro.exe
.exe windows x86

e4b36634e3c59b1efcf60dd27246c495

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentProcess
VirtualAlloc
lstrlenA
WaitForSingleObject
GetModuleHandleA
CreateFileA
CloseHandle
K32GetModuleInformation
CreateThread
HeapAlloc
GetProcAddress
CreateFileMappingA
ExitProcess
FreeLibrary
MapViewOfFile
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsProcessorFeaturePresent

user32

DispatchMessageA
IsDialogMessageA
MessageBoxA
TranslateMessage
CreateDialogParamA
GetMessageA
ShowWindow

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 844B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 204B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

aloe9ri
Size: 51KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ