SnapKey-1.2.9-Portable.zip
- SHA256 4a5b87f2b83079a2f83927a329dd3fa88787f587cb199b7485d9ab9d19d50467
Password
i dont know
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
README.pdf
Resource
win10v2004-20260513-en
windows10-2004-x64
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
README.pdf
Resource
win11ltsc2024-20260629-en
windows11-ltsc_2024-x64
16 signatures
150 seconds
Behavioral task
behavioral3
Sample
SnapKey.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral4
Sample
SnapKey.exe
Resource
win11ltsc2024-20260629-en
windows11-ltsc_2024-x64
3 signatures
150 seconds
General
- Target SnapKey-1.2.9-Portable.zip
- Size 1.4MB
- Sample260706-m4d7jsd13s
- SHA256 4a5b87f2b83079a2f83927a329dd3fa88787f587cb199b7485d9ab9d19d50467
- MD5 d0219b1dd18059d997b8c50ce274acdf
- SHA1 df32a3477bb8ae4b57c5a1a0681f11dfa16fb856
- SHA512 00abbacbb922cf6a8be7e5136bd5237550d17522b45a5946b5cf45436e7ada022f2bef66040bd6a1118c036c560ad059e98150b1ee1ea6f4440f40cc4006f9f1
- SSDEEP 24576:dy9zK9pokQDYL/zvn8kRpkNgELAq0/1U0MVD2gAsz4BCyTVsE9C/1syir9TqHkQ6:dy9upopDAn8kR2Fk9YVDBAu4BBVw/1s5
- TLSH T1A86533C3ACA7F679CC8CFF722713BB0D5C594862D06EF643AD20641A2601157E79BE92
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/SnapKey.exe
File Explorer
-
SnapKey-1.2.9-Portable.zip.zip .pdf 1.4MB
-
LICENSE1KB
-
README.pdf.pdf 732KB
-
SnapKey.exe.exe 4.3MB
-
config.cfg1KB
-
icon.ico104KB
-
icon_off.ico104KB
-
meta/backup.snapkey1KB
-
meta/package.txt341B
-
meta/profiles/ARROW Keys.cfg1KB
-
meta/profiles/AZERTY Layout.cfg1KB
-
meta/profiles/CUSTOM Profile.cfg1KB
-
meta/profiles/ESDF Keys.cfg1KB
-
meta/profiles/WASD Keys.cfg1KB
-
meta/versionhistory.txt619B
LICENSE
- SHA256 1aee492fb8d0b2b6ab3a034e3f7f90f08284dff19aeeed068fb07784a2296900
- MD5 de287d1d1af13aaf36e4132ccc047f97
- SHA1 5f69ed0be0f6373cabc860eb2909f2372e1f921d
- SHA512 864cb01527f6e336cb10507bbc99b421dbdb9b989a8e86b31c6a42c524da1efaf0dc1f822f40f132cee5bc0ce3207b7f45a78cf263edb22f9eaf72593e42a50a
- TLSH T13411421EB251076218AB13A055B8A8D5F22BB25A7A5F2A84246DF245232A06CC6FB844
- MD5 SHA1 SHA512 TLSH
README.pdf
- SHA256 4dfcc352b6f0a16b93ce977e31966e1a8f23be2aae73bb3b56491a53a9db9874
- MD5 f4a42e10e32d362ea5bdb1f067b7cd22
- SHA1 d87e0f10671d2f70465c7fc25d547e8f523f7abc
- SHA512 c0727bb11b8eeb01e276f82071e214cdfeba67c5b7ac1393395d846c13a447f5fd22340807fc0ab22e5a76df3f13b5a13eebd1ef9436090e82edb39f22305176
- SSDEEP 12288:YKcjstjMjuXzn8LjeHaJ+I6W86lNtLeyEGAJruo5X8oeUmJDbFpgiCPcVZWmY:YKreuD8eHCvlpRE5ruo5X8ZpgBPt
- TLSH T14FF496578C08DB87A45983E8BE030DAD6F0B270DE9923AFF11214EDF3E506565CDA52E
- MD5 SHA1 SHA512 SSDEEP TLSH
Password
i dont know
SnapKey.exe
- IMPHASH 6734ad60c3fe0520f98bdcd1c7c33e4a
- SHA256 c25f2ad3f662e5d93d69fbff1ae0c8b67f6303ad47bad22cd8abef0256bb06b9
- MD5 aea9d8cc13438d911cdb3c50dda09ad6
- SHA1 e5b48e2fc3c41b4700f0d8d7445fb5749c66119a
- SHA512 0ef1e35170e18bccdb864fd6e397178255cd5e0418a8686d357228b2820c26b9b2202cd7a088ed836f158efeb0935efa7b527ef82a082e9a43898363d9431424
- SSDEEP 49152:pP7hEl/QY81+RFCYRgz3Y1Auu+nkqb5hfMXqSM1O4C:pPY81+RFCYRIqb5hfMXqSM1O4C
- TLSH T15926D69325DB0CE6DEC633B8B5C722395735FE32CE691A2A9644C43578532C4BE2EB41
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Password
i dont know
Minor OS version
0
Major OS version
4
Entry point
5072
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
kernel32
AddVectoredExceptionHandler
CloseHandle
CopyFileA
CreateEventA
CreateFileW
CreateHardLinkW
CreateMutexA
CreateSemaphoreA
DeleteCriticalSection
DeleteFileW
DuplicateHandle
EnterCriticalSection
FindFirstVolumeW
FindNextVolumeW
FindVolumeClose
FormatMessageA
GetCurrentProcess
GetCurrentProcessId
GetCurrentThread
GetCurrentThreadId
GetDiskFreeSpaceExW
GetFileAttributesW
GetFileInformationByHandle
GetFileSizeEx
GetFileType
GetFullPathNameW
GetHandleInformation
GetLastError
GetModuleFileNameA
GetModuleHandleA
GetProcessAffinityMask
GetSystemTimeAsFileTime
GetTempPathW
GetThreadContext
GetThreadPriority
GetTickCount64
GetVolumeInformationW
InitializeCriticalSection
IsDebuggerPresent
LeaveCriticalSection
LocalFree
MoveFileExW
MultiByteToWideChar
OpenProcess
OutputDebugStringA
RaiseException
ReleaseMutex
ReleaseSemaphore
RemoveDirectoryW
RemoveVectoredExceptionHandler
ResetEvent
ResumeThread
RtlCaptureContext
RtlLookupFunctionEntry
RtlUnwindEx
RtlVirtualUnwind
SetEndOfFile
SetEvent
SetFilePointer
SetLastError
SetProcessAffinityMask
SetThreadContext
SetThreadPriority
SetUnhandledExceptionFilter
Sleep
SuspendThread
TlsAlloc
TlsGetValue
TlsSetValue
TryEnterCriticalSection
VirtualProtect
VirtualQuery
WaitForMultipleObjects
WaitForSingleObject
WideCharToMultiByte
lstrcpyA
api-ms-win-crt-convert-l1-1-0
_ultoa
mbrtowc
wcrtomb
api-ms-win-crt-environment-l1-1-0
__p__environ
__p__wenviron
_wgetcwd
api-ms-win-crt-filesystem-l1-1-0
_findclose
_fstat64
_wchdir
_wchmod
_wfindfirst64
_wfindnext64
_wfullpath
_wmkdir
_wstat64
api-ms-win-crt-heap-l1-1-0
_set_new_mode
calloc
free
malloc
realloc
api-ms-win-crt-locale-l1-1-0
___lc_codepage_func
___mb_cur_max_func
localeconv
setlocale
api-ms-win-crt-math-l1-1-0
__setusermatherr
_fdopen
api-ms-win-crt-private-l1-1-0
__C_specific_handler
__intrinsic_setjmpex
longjmp
memchr
memcmp
memcpy
memmove
strchr
api-ms-win-crt-runtime-l1-1-0
__p___argc
__p___argv
__p___wargv
_beginthreadex
_cexit
_configure_narrow_argv
_configure_wide_argv
_crt_at_quick_exit
_crt_atexit
_endthreadex
_errno
_get_errno
_initialize_narrow_environment
_initialize_wide_environment
_initterm
_set_app_type
_set_errno
_set_invalid_parameter_handler
abort
exit
signal
strerror
api-ms-win-crt-stdio-l1-1-0
__acrt_iob_func
__p__commode
__p__fmode
__stdio_common_vfprintf
__stdio_common_vfwprintf
__stdio_common_vsprintf
_close
_close
_fileno
_get_osfhandle
_lseeki64
_read
_telli64
_wfopen
_wopen
_write
fclose
fflush
fopen
fputc
fputs
fwrite
setvbuf
api-ms-win-crt-string-l1-1-0
_strdup
iswctype
memset
strcmp
strcoll
strlen
strncmp
strxfrm
towlower
towupper
wcscat
wcscmp
wcscoll
wcscpy
wcslen
wcsxfrm
api-ms-win-crt-time-l1-1-0
__daylight
__timezone
__tzname
_tzset
_wutime64
strftime
wcsftime
api-ms-win-crt-utility-l1-1-0
rand_s
shell32
ShellExecuteA
Shell_NotifyIconA
user32
AppendMenuA
CallNextHookEx
CreatePopupMenu
CreateWindowExA
DefWindowProcA
DestroyIcon
DestroyMenu
DispatchMessageA
GetCursorPos
GetMessageA
LoadIconA
LoadImageA
MapVirtualKeyA
MessageBoxA
PostQuitMessage
RegisterClassExA
SendInput
SetForegroundWindow
SetWindowsHookExA
TrackPopupMenu
TranslateMessage
UnhookWindowsHookEx
Name
.text
Size
1.0MB
Virtual Size
1.0MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
9KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
74KB
Virtual Size
74KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.pdata
Size
76KB
Virtual Size
76KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.xdata
Size
101KB
Virtual Size
101KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.bss
Size
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.idata
Size
8KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.CRT
Size
512B
Virtual Size
104B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
512B
Virtual Size
16B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
108KB
Virtual Size
107KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
6KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/4
Size
512B
Virtual Size
176B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/19
Size
17KB
Virtual Size
17KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/31
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/45
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/57
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/70
Size
512B
Virtual Size
270B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/81
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/97
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/113
Size
512B
Virtual Size
100B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
config.cfg
- SHA256 b0706966cb7c0eb01bd9f34d1373aa5c5617776f39cd56213a92ad93b77751a0
- MD5 98b5aa03580e80a233c57bb49e1b7738
- SHA1 5ce1c3f052121b565aa3f94f5da6d2295b2ebfe6
- SHA512 ff43e43d5160389c9c14e9c2b46e3bca49dda6c2ae494ccd801abda35fca77fcad1fc83408f3f6a874b9901ac1b60001c3c08e42d9ea3789c70fe1f48cf03b31
- TLSH T169216BA31C06F75BC5FDC901216CF52CF38D9A63D5223C98B24F49405B16D82AB9C57E
- MD5 SHA1 SHA512 TLSH
icon.ico
- SHA256 df599d040320c35ee43fa0ca96bccb976aaab5f41c1108f310f6503ef930ece0
- MD5 61c3f30415a3b858238de03d87916311
- SHA1 e687afcb1abbcb4342fd6611a8983265627d10f5
- SHA512 2f0b8a1e38a0e45315741240a61875cc405e36d06a2ca99ac620b5e00f3b51548f29c185e34206cd12860a08cadfb1fbb13a9fe554b2cfd0b1b444157f043052
- SSDEEP 384:iUk2QsUhPwBsxN/Qig20jPeC46MjjjjjjBHtuuuuu6u67P3Z+Fo:3NhB0dM20jnabyo
- TLSH T1B3A35005334C9F51FB60B176E58B8330B63B2B165FE83162563D122706F36B0E96BAD9
- MD5 SHA1 SHA512 SSDEEP TLSH
icon_off.ico
- SHA256 160b46ccb42a697b5d87efa6411dbaf3ea2d7c1787bd26f25621f1d1a9236359
- MD5 1ef786b29b862df20315eef00934d611
- SHA1 e390c5f3f6cecc9b55308ff13c5647ce04dabacc
- SHA512 f2d7fb66dfe085a045d119d19b75efae56ddffe6e08894260f2c7d9ebf4e5da297672a071d4c17940f1ff12ad60f3ddd53f2afcd9877e39170fa5c74bf0ced8f
- SSDEEP 384:qHWMOAZuITtyMYTIjucKSRdW8E/FnT6WN220+YLMf:TAZuITAbT7/FEWiy
- TLSH T1B8A3CE7716380F52FD9C397144899E9E2F787F4BBE910A3E620CB91E59241E4EB90378
- MD5 SHA1 SHA512 SSDEEP TLSH
meta/backup.snapkey
- SHA256 b7743354348b8f1930bddb90532ec5cdb8ca412d389b310fefec5b905b63ef84
- MD5 ec5c6a5b8a08c97ab5bd525f5ccbfb60
- SHA1 d20fb6c9c698fb773cd7ac67be2f2ff544e55563
- SHA512 f39021bd30d1cca3e89560d347de64e7f067e112323903d0528c2a71454c4c389ceecc33d931524148c8ab2a9c495c2009cd163cfe0247e2cbb8f604d8fce676
- TLSH T165216BA71C06F75BC5FDCA01216CF52CF38D9A63D5223C98B24F49404B16982ABDC57E
- MD5 SHA1 SHA512 TLSH
meta/package.txt
- SHA256 7fbc0d9bfe7860a3c7944fa5c65f9e9fa53123c5b31cb60bffc391187008b176
- MD5 8cb29da7d3e22601b97c1e140f8ee2fe
- SHA1 c806d4cd1d6542565d31c9fa69c22e6c2f2d823e
- SHA512 4f7242166e69b7aea60a9a72eb4c2d0e1d55bec425b6610fcae5ef090c9638bd334b85f8502df4cc349d0237cad24584ae514bf93562ecb1dbc8fea697f8699e
- TLSH T188E07D07AC4E6C4A82C4DD03710C6594DC4869563D6219502077D887E73C400D7AD19D
- MD5 SHA1 SHA512 TLSH
meta/profiles/ARROW Keys.cfg
- SHA256 70b996f096cf51509f6bd4844413076a9e69854e5c1c2f2486fffe27d695d3cd
- MD5 34e5af4256c4a371390c1bbba91512cd
- SHA1 8b9924d5dd270546311831e1c588fc7cc0d57255
- SHA512 e0ac4d07f4a7adedbfc226510ee281cc481c82a8c61fd03e21d095528dea961fb3bb74f3c4a0615c727d3cf8b2c1f18988506c6f4cada3f778a89dabcccec9f3
- TLSH T17F216BA31C06F75BC1FDC901216CB11CF38D9A23D5223C98F28F49504B1A982AB9C56E
- MD5 SHA1 SHA512 TLSH
meta/profiles/AZERTY Layout.cfg
- SHA256 052415b2ea3d919696955ff7439cf0fe53a31b87200dec033a94ffa6a24b6b39
- MD5 cb6fad5e97c7b720d62e76b8d0f8f26a
- SHA1 aeadfc4fcffbe2b68807222da89717abc10271b9
- SHA512 31c1f45412dd38e499b5de40b9e57fcbaa069416ce4914e2303c20c52835a924548a47ded9d3b2a61944121eddebab45e8adc3c4fa5593313fae4eab8c0fd0e3
- TLSH T111216BA31C06F75BC1FDC901216CF52CF39D9A23D5223C98B24F49405B16982ABDC57E
- MD5 SHA1 SHA512 TLSH
meta/profiles/CUSTOM Profile.cfg
- SHA256 98ae8b04f1e64fc45d2d7ee1828d308252c16c8cf5c389b3dcad6013e18bb6bb
- MD5 5035adfc032181dceba074631c7ad60e
- SHA1 c50fc16273bef6f3275321af20ebbc6e74280c60
- SHA512 f7c38eb80af2f3668919f7c51e681d852665912dab3bb379c89787c3f3dfe5c503be076ab1b356667cdbe93bc956c3b82804a4c9b388a78456ee09aef2429f7b
- TLSH T15F216BA71C06F75BC5FDCA01216CF52CF38D9A63D5223C98B24F49404B16982ABDC57E
- MD5 SHA1 SHA512 TLSH
meta/profiles/ESDF Keys.cfg
- SHA256 3f0d10e21b2b41ac17a515e798db5a7b70862afb7c05ce590a3839d3929e1ce7
- MD5 647efa81ee97317a89c780868862b315
- SHA1 3faf60d85278a069040e529568153438c6e2d381
- SHA512 5640302041c5adf4a7dfdea0260032aebf174f38211dfb51952c3d9a389b6c75c4cd2b5bbcdb66bac0c748ffd49d37719195457e1f0900619a2641aa1be1e2ad
- TLSH T1A52149A31C06F75BC1FDCA01216CF52CF38D9A23D5223C98B24F49405B16982AB9C56E
- MD5 SHA1 SHA512 TLSH
meta/profiles/WASD Keys.cfg
- SHA256 98ae8b04f1e64fc45d2d7ee1828d308252c16c8cf5c389b3dcad6013e18bb6bb
- MD5 5035adfc032181dceba074631c7ad60e
- SHA1 c50fc16273bef6f3275321af20ebbc6e74280c60
- SHA512 f7c38eb80af2f3668919f7c51e681d852665912dab3bb379c89787c3f3dfe5c503be076ab1b356667cdbe93bc956c3b82804a4c9b388a78456ee09aef2429f7b
- TLSH T15F216BA71C06F75BC5FDCA01216CF52CF38D9A63D5223C98B24F49404B16982ABDC57E
- MD5 SHA1 SHA512 TLSH
meta/versionhistory.txt
- SHA256 a34ff355091a6d5cb5c132f335d745ab766b81f6da5f3382427ae19cc0d7aac6
- MD5 10bebfa0e9c085b77f47aff8caafd645
- SHA1 f578b6265a26f416fb966ac283736f579cea592d
- SHA512 dcd94e06f2ac519d287ae88ea72cbe14399d7196a708b4181ae7999fe3917df3c4863368b01d20b732310b0d519a6eff97397285beaa16790110ab99ff012668
- TLSH T103F0744EAD2D5560473FC6C24ED66EA1FEE1D84C5650F259B12D6B3C1F03DB4638C28A
- MD5 SHA1 SHA512 TLSH