Static

static

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    KeyTweak_install.exe

  • Size

    280KB

  • MD5

    0437c75eb8b510b7d3715f047b6a84ff

  • SHA1

    461af9edfba901e13f54f464b299dc2476fac2f8

  • SHA256

    ddb0bad2a358191d2ee4ac8b8d359cc15e66a8dce6a49a8a6cd3b008f5345c1e

  • SHA512

    9c75e2bfb8e505a06189854469cf1a551237609dd6badef0699eca75dc346ce0ebcfd9b6a0c15eec3b0667016d77f36ad2fb7c066968a85aea12168c0c67ae0f

  • SSDEEP

    6144:Cq1nASnIi9Hty335NBpsiAPK8zRtwuM8JfmUwdtKoyzidrXR:nnb12nBpefKugMzi/

Score
3/10
pdflink

Malware Config

Signatures

  • One or more HTTP URLs in PDF identified

    Detects presence of HTTP links in PDF files.

    pdflink
  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs
    installer

Files

  • KeyTweak_install.exe
    .exe windows:4 windows x86 arch:x86

    Password: 2012

    18bc6fa81e19f21156316b1ae696ed6b


    Headers

    Imports

    Sections

  • KeyTweak Manual.pdf
    .pdf

    Password: 2012

    • http://www.computer-engineering.org/ps2keyboard/scancodes1.html

    • http://www.microsoft.com/whdc/archive/scancode.mspx

    • http://www.microsoft.com/whdc/archive/w2kscan-map.mspx

    • http://yahoo.com

    • https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=2351203

  • KeyTweak.exe
    .exe windows:4 windows x86 arch:x86

    Password: 2012

    1b2674ef644e7388bd73806ea2d4af19


    Headers

    Imports

    Sections

  • uninstall.exe
    .exe windows:4 windows x86 arch:x86

    Password: 2012

    18bc6fa81e19f21156316b1ae696ed6b


    Headers

    Imports

    Sections