skt[.]exe | Triage

Resubmissions

25-02-2024 16:55

240225-vfk9yshc8z 3

25-02-2024 16:52

240225-vdf78agd34 3

Sharing

Copy URL

Twitter E-mail

General

Target

skt.exe
Size

8.3MB
MD5

4cff75599a63c70929bfb572c3e6097a
SHA1

8515dd534762cec575725c7c49a0f1f9f4c93f22
SHA256

4ff6ff92ff4ffee344cbe5f68af82354a3cd1d8a1fe9bf87bc282169b4e60cff
SHA512

18c08236e734d251fe718efdf248aaa62e4ffb8b3f12c57351f0c81e33e8cf356f260253a8cd09f5c3ef8d4ed2d98ab0071256751bf522e9e7bf788e38bc3bdc
SSDEEP

196608:w8ygYuyI/jmxGVXlpvbA5vt6yrce47gGFQgZg6FojsCq3UzfvNeL9D:w8ygYuyaEG3pvKMyASSCSFCqcNe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
skt.exe

Files

skt.exe
.exe windows:6 windows x64 arch:x64

c2a7f9d2f814a8d2b41aad37ab5fa75d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

api-ms-win-core-registry-l1-1-0

RegNotifyChangeKeyValue

msvcrt

_CxxThrowException

ntdll

RtlCharToInteger

advapi32

MD5Init
OpenSCManagerW
EnumServicesStatusExW
OpenServiceW
QueryServiceConfigW
CloseServiceHandle

comctl32

ord410

kernel32

GetSystemDirectoryW
LocalAlloc
GetCurrentProcess
GetCurrentThread
LocalFree
GetModuleFileNameW
GetProcessAffinityMask
SetProcessAffinityMask
SetThreadAffinityMask
Sleep
ExitProcess
GetLastError
FreeLibrary
LoadLibraryA
GetModuleHandleA
GetProcAddress

user32

GetWindowThreadProcessId

Sections

.text
Size: - Virtual size: 347KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 75KB - Virtual size: 74KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ikklpi
Size: - Virtual size: 8.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.nfkprii
Size: 8.2MB - Virtual size: 8.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bcntmzu
Size: 1024B - Virtual size: 736B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Resubmissions

Sharing

General

Malware Config

Signatures

Files

c2a7f9d2f814a8d2b41aad37ab5fa75d

Headers

DLL Characteristics

File Characteristics

Imports

api-ms-win-core-registry-l1-1-0

msvcrt

ntdll

advapi32

comctl32

kernel32

user32

Sections

.text Size: - Virtual size: 347KB

.rdata Size: 75KB - Virtual size: 74KB

.data Size: - Virtual size: 46KB

.ikklpi Size: - Virtual size: 8.3MB

.nfkprii Size: 8.2MB - Virtual size: 8.2MB

.bcntmzu Size: 1024B - Virtual size: 736B

.rsrc Size: 512B - Virtual size: 480B

.text
Size: - Virtual size: 347KB

.rdata
Size: 75KB - Virtual size: 74KB

.data
Size: - Virtual size: 46KB

.ikklpi
Size: - Virtual size: 8.3MB

.nfkprii
Size: 8.2MB - Virtual size: 8.2MB

.bcntmzu
Size: 1024B - Virtual size: 736B

.rsrc
Size: 512B - Virtual size: 480B