hotkeyb[.]exe | Triage

Resubmissions

29/03/2024, 05:16

240329-fx9ljsbc46 3

Sharing

Copy URL Twitter E-mail

General

Target

hotkeyb.exe
Size

600KB
MD5

1e2bca08105f215f91efd374342ee7d8
SHA1

e13dd6923d8c90657eee4853e47dae2023d2f508
SHA256

640dfa33d576b521e98c298646be79a53106a1a975a5289f929039284e7b0888
SHA512

e8c445ec8340e5f8a99652451cda7a2d2de412436317d5e7d94a2bb90bc7c46165f61a22c27f380ce94166d7890e1b87e952c791aeda4bf23e241b16f749a272
SSDEEP

6144:C4tQGjmpY3sDlVJQ8K8CwXTzC1I/oYXTS4eTeh1WdvqJQefPNEVI+SXQfBfxs9W/:vBd4K8zC4DrX2VTUUODfmVIY+9sNZ2H

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
hotkeyb.exe

Files

hotkeyb.exe
.exe windows:4 windows x86 arch:x86

4d309cb1b3706eb4a3551cbc29c9ddc0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

wininet

InternetCloseHandle
InternetReadFile
HttpQueryInfoA
InternetOpenUrlA
InternetOpenA

hkhook21

ord11
ord2
ord3
ord1
ord4
ord5
ord6
ord9
ord8
ord10
ord7

winmm

timeGetTime
mixerClose
mixerGetLineControlsA
mixerOpen
mixerGetNumDevs
mixerSetControlDetails
mixerGetControlDetailsA
mciSendCommandA
PlaySoundA
mixerGetDevCapsA
mixerGetLineInfoA

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

ws2_32

shutdown
closesocket
sendto
WSAStartup
bind
getsockname
ntohs
WSAAsyncSelect
WSACleanup
gethostbyname
htons
recvfrom
__WSAFDIsSet
select
WSAGetLastError
connect
ioctlsocket
socket
recv
send

kernel32

GetTempPathA
SetLastError
MulDiv
lstrcpyA
lstrcmpW
lstrcatA
GlobalDeleteAtom
GlobalFindAtomA
GlobalAddAtomA
GlobalGetAtomNameA
FreeResource
lstrcpynA
InterlockedDecrement
lstrcmpA
ResumeThread
EnumResourceLanguagesA
ConvertDefaultLocale
GetCurrentThread
SetFilePointer
FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
GetSystemTime
GetVolumeInformationA
GetFullPathNameA
GlobalFlags
LocalAlloc
LeaveCriticalSection
GlobalReAlloc
GlobalHandle
EnterCriticalSection
TlsGetValue
InitializeCriticalSection
TlsAlloc
TlsSetValue
LocalReAlloc
DeleteCriticalSection
TlsFree
InterlockedIncrement
GetCPInfo
GetOEMCP
FileTimeToSystemTime
GetFileTime
WritePrivateProfileStringA
SetErrorMode
RtlUnwind
GetTimeFormatA
GetDateFormatA
RaiseException
HeapAlloc
HeapFree
IsBadReadPtr
GetStartupInfoA
GetCommandLineA
ExitProcess
HeapReAlloc
TerminateProcess
HeapSize
GetTimeZoneInformation
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
SetUnhandledExceptionFilter
HeapDestroy
HeapCreate
VirtualFree
IsBadWritePtr
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
UnhandledExceptionFilter
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
IsValidCodePage
SetEnvironmentVariableA
SetEnvironmentVariableW
GetStdHandle
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
QueryPerformanceCounter
IsBadCodePtr
SetStdHandle
GetLocaleInfoW
SystemTimeToFileTime
GetLocalTime
OpenFileMappingA
GetFileAttributesA
FindFirstFileA
MoveFileA
FindClose
WriteFile
DeleteFileA
CreateDirectoryA
GetCurrentThreadId
GetSystemTimeAsFileTime
FileTimeToLocalFileTime
FileTimeToDosDateTime
CreateFileMappingA
MapViewOfFile
UnmapViewOfFile
GetModuleFileNameA
lstrlenA
lstrcmpiA
CompareStringW
CompareStringA
GetVersion
FreeLibrary
GetSystemDefaultLCID
CreateFileA
GetFileSize
ReadFile
GetPrivateProfileStringA
WinExec
CreateSemaphoreA
ReleaseSemaphore
ResetEvent
GlobalFree
GetExitCodeThread
TerminateThread
GlobalSize
ReleaseMutex
SetEvent
CreateEventA
CreateMutexA
GetCurrentProcess
GetModuleHandleA
LoadLibraryA
GetProcAddress
OpenProcess
GetCurrentProcessId
CloseHandle
GlobalAlloc
GlobalLock
GlobalUnlock
MultiByteToWideChar
GetLastError
CreateThread
GetTickCount
ExitThread
Sleep
WaitForSingleObject
WideCharToMultiByte
FormatMessageA
LocalFree
FindResourceA
LoadResource
LockResource
SizeofResource
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
DuplicateHandle

user32

InflateRect
WindowFromPoint
SetActiveWindow
GetActiveWindow
KillTimer
ToAsciiEx
GetKeyboardState
DestroyCursor
MessageBoxIndirectA
DdeUninitialize
DrawIcon
SetMenuDefaultItem
GetSystemMenu
ShowOwnedPopups
AdjustWindowRectEx
IsClipboardFormatAvailable
TabbedTextOutA
DrawTextExA
GrayStringA
ClientToScreen
GetWindowDC
GetWindowPlacement
SystemParametersInfoA
GetDlgCtrlID
UnregisterClassA
SetScrollInfo
GetScrollInfo
ScrollWindow
GetMessageTime
GetLastActivePopup
GetWindowTextLengthA
SendDlgItemMessageA
RemovePropA
GetPropA
SetPropA
GetClassLongA
GetCapture
WinHelpA
RegisterWindowMessageA
IsDialogMessageA
LoadBitmapA
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
GetMenuStringA
wsprintfA
EndDialog
CreateDialogIndirectParamA
GetDesktopWindow
ValidateRect
TranslateMessage
DestroyMenu
PostQuitMessage
SetParent
UpdateWindow
GetMessagePos
EnableMenuItem
CheckMenuItem
MessageBoxA
GetClassInfoExA
RegisterClassExA
BeginPaint
EndPaint
SetCursor
ShowScrollBar
SetScrollPos
GetScrollPos
SetTimer
ScreenToClient
GetDlgItemTextA
DrawMenuBar
GetMenu
RemoveMenu
InsertMenuA
DestroyIcon
LoadImageA
IsDlgButtonChecked
CheckDlgButton
ShowWindow
LoadStringA
FindWindowA
SetDlgItemTextA
VkKeyScanExA
GetClassNameA
GetDlgItem
TrackPopupMenu
EnumWindows
IsIconic
GetTopWindow
IsWindowEnabled
IsWindowVisible
MoveWindow
DdeInitializeA
DdeCreateStringHandleA
DdeConnect
DdeGetLastError
DdeClientTransaction
DdeFreeDataHandle
DdeFreeStringHandle
DdeDisconnect
GetCursorPos
GetWindowRect
RegisterClassA
CreateWindowExA
DestroyWindow
EmptyClipboard
EnumClipboardFormats
GetKeyState
GetKeyboardLayout
MapVirtualKeyExA
mouse_event
keybd_event
GetClipboardData
CloseClipboard
OpenClipboard
ExitWindowsEx
LoadIconA
IsWindow
MsgWaitForMultipleObjects
DispatchMessageA
SetClipboardData
GetAsyncKeyState
ModifyMenuA
GetSubMenu
GetMenuState
GetMenuItemID
GetMenuItemCount
AppendMenuA
CreatePopupMenu
SetForegroundWindow
GetWindowThreadProcessId
AttachThreadInput
SetWindowPos
CharUpperA
GetWindow
RegisterHotKey
GetFocus
SetFocus
UnregisterHotKey
GetKeyNameTextA
MapVirtualKeyA
DestroyCaret
UnhookWindowsHookEx
CreateCaret
SetWindowsHookExA
CallNextHookEx
ShowCaret
HideCaret
SetCaretPos
GetMessageA
PeekMessageA
GetForegroundWindow
GetWindowTextA
PostThreadMessageA
MapWindowPoints
CharUpperBuffA
CharLowerBuffA
GetClassInfoA
AdjustWindowRect
DefWindowProcA
SetWindowLongA
CallWindowProcA
ReleaseDC
GetSystemMetrics
GetSysColorBrush
GetWindowLongA
ReleaseCapture
SetCapture
LoadCursorA
GetParent
InvalidateRect
GetClientRect
PostMessageA
DrawFrameControl
DrawEdge
OffsetRect
PtInRect
GetSysColor
FillRect
DrawTextA
DrawFocusRect
GetDC
EnableWindow
SendMessageA
CopyRect
SetWindowTextA
CreateDialogParamA
GetNextDlgTabItem
GetKeyboardLayoutList
SetDlgItemInt
MapDialogRect
LoadMenuA

gdi32

CreateDCA
EndDoc
EndPage
StartPage
SetAbortProc
StartDocA
CreateBitmap
CreatePalette
RealizePalette
StretchDIBits
SaveDC
LineTo
GetDeviceCaps
RectVisible
GetTextExtentExPointA
ExtTextOutA
Rectangle
SetMapMode
SetWindowExtEx
SetViewportExtEx
SetViewportOrgEx
LPtoDP
PtVisible
TextOutA
Escape
CreateFontA
ScaleViewportExtEx
ScaleWindowExtEx
SelectPalette
CreateRectRgn
SelectClipRgn
GetStockObject
MoveToEx
GetClipBox
SetStretchBltMode
RestoreDC
CreateCompatibleBitmap
BitBlt
StretchBlt
GetObjectA
CreateCompatibleDC
GetTextExtentPoint32A
DeleteDC
Ellipse
SetBkMode
PatBlt
CreateFontIndirectA
CreatePen
SetTextColor
SetBkColor
CreateSolidBrush
DeleteObject
SelectObject
OffsetViewportOrgEx
GetTextMetricsA

comdlg32

PrintDlgA
GetFileTitleA
ChooseFontA
GetOpenFileNameA
GetSaveFileNameA
PageSetupDlgA

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

advapi32

RegQueryValueA
RegEnumKeyA
RegOpenKeyA
RegDeleteKeyA
RegDeleteValueA
RegQueryInfoKeyA
RegCreateKeyExA
RegEnumValueA
RegEnumKeyExA
RegSetValueExA
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
RegQueryValueExA
RegOpenKeyExA
RegCloseKey

shell32

ShellExecuteA
ShellExecuteExA
SHGetDesktopFolder
SHChangeNotify
SHGetPathFromIDListA
SHBrowseForFolderA
ExtractIconExA
DragQueryFileA
SHGetMalloc
Shell_NotifyIconA
SHGetSpecialFolderLocation

comctl32

ImageList_Draw
ord17
ImageList_ReplaceIcon
ImageList_Destroy
ImageList_LoadImageA

shlwapi

PathStripToRootA
PathFindFileNameA
PathFindExtensionA
PathIsUNCA

ole32

CoCreateInstance
CoCreateGuid
CoUninitialize
CoInitialize

oleaut32

VariantClear
VariantChangeType
VariantInit

Sections

.text
Size: 452KB - Virtual size: 448KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 108KB - Virtual size: 105KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Resubmissions

Sharing

General

Malware Config

Signatures

Files

4d309cb1b3706eb4a3551cbc29c9ddc0

Headers

File Characteristics

Imports

wininet

hkhook21

winmm

version

ws2_32

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

ole32

oleaut32

Sections

.text Size: 452KB - Virtual size: 448KB

.rdata Size: 108KB - Virtual size: 105KB

.data Size: 16KB - Virtual size: 53KB

.rsrc Size: 20KB - Virtual size: 16KB

.text
Size: 452KB - Virtual size: 448KB

.rdata
Size: 108KB - Virtual size: 105KB

.data
Size: 16KB - Virtual size: 53KB

.rsrc
Size: 20KB - Virtual size: 16KB