Static task
static1
Behavioral task
behavioral1
Sample
SharpKeys.exe
Resource
win10-20240611-en
Behavioral task
behavioral2
Sample
SharpKeys.exe
Resource
win10v2004-20240709-en
General
-
Target
sharpkeys394.zip
-
Size
23KB
-
MD5
d3bb7ec7d3a3c3c6fd10532d20d0c5d0
-
SHA1
0e7aa5351b3d4b639e171e7832758be454199ac3
-
SHA256
06a40098214f1875b74b46a13d6a71728824bd5c8b946fd627014362f2001c07
-
SHA512
eea28aa6125338c96245096cc3bb7d55982ff40952370c4172760b3de3d0b80a376d8391157a40523aa36f738df2fbe29220f00a82216e25f88e04e948f9ca7f
-
SSDEEP
384:Wg5q3zeMYw7h8O2f2fX1kXC9sOldYM6e7mwVem5eouOIxTmZeBPibphIHj:WrYwlh2+1XJge7qm5enN64PKcD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/SharpKeys.exe
Files
-
sharpkeys394.zip.zip
-
SharpKeys.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 64KB - Virtual size: 61KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
faq.htm.html