Talk It![.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
Talk It!.exe
Size 380KB
Sample261027-2yy24aef72
SHA256 2bfc1657c918035fab5fa2da8e4e76d54cf9b65ac1e65dcdede65cc19a6771f6
MD5 fdc726071430ada68e117f6f12f01322
SHA1 2daa8755f47713b00c1dbefe7d9c8e4c5690518b
SHA512 a5cb35ea0e5c6bb4553d258bcad76ea52db30370e84a065d6ca4e2924b08e6d2af85f6cde5dc99fc7c4e4396408a4fb390e2401026ae9698c1fcca3380f0aaeb
SSDEEP 6144:TMM8fApOSxvbaiwb7AyT21XOHxXAsEbzd/CAuQ0ykuyoJlbOSvT+Pn1IB:N8f8vbad7Aya0R47uZuxJ7vT+/C
TLSH
T1DF8423447A428BE2C5FC0EFEEB795FEF7652D8A3822E5436964055F2ED50883578C28C
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Talk It!.exe

File Explorer

Talk It!.exe

.exe 380KB

Talk It!.exe

IMPHASH 6528ff49b29691f162bd41cb206544ac
SHA256 2bfc1657c918035fab5fa2da8e4e76d54cf9b65ac1e65dcdede65cc19a6771f6
MD5 fdc726071430ada68e117f6f12f01322
SHA1 2daa8755f47713b00c1dbefe7d9c8e4c5690518b
SHA512 a5cb35ea0e5c6bb4553d258bcad76ea52db30370e84a065d6ca4e2924b08e6d2af85f6cde5dc99fc7c4e4396408a4fb390e2401026ae9698c1fcca3380f0aaeb
SSDEEP 6144:TMM8fApOSxvbaiwb7AyT21XOHxXAsEbzd/CAuQ0ykuyoJlbOSvT+Pn1IB:N8f8vbad7Aya0R47uZuxJ7vT+/C
TLSH
T1DF8423447A428BE2C5FC0EFEEB795FEF7652D8A3822E5436964055F2ED50883578C28C
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

13806

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

shell32

ShellExecuteA FindExecutableA

user32

DefWindowProcA BeginPaint GetSysColor GetClientRect SetRect EndPaint SetWindowWord GetWindowWord RegisterClassA OemToCharA OemToCharBuffA LoadCursorA DestroyWindow SetWindowTextA SendMessageA EnableWindow PostMessageA GetLastActivePopup ShowWindow SetTimer KillTimer DialogBoxIndirectParamA GetWindowRect GetSystemMetrics EndDialog GetKeyState PeekMessageA TranslateMessage DispatchMessageA GetParent SetDlgItemTextA SendDlgItemMessageA GetDlgItem InvalidateRect UpdateWindow wsprintfA MessageBoxA SetCursor SetWindowPos GetDlgItemTextA

kernel32

CreateDirectoryA GetVolumeInformationA _lwrite SetFileTime LocalFileTimeToFileTime RtlUnwind GetCommandLineA GetModuleHandleA ExitProcess SetErrorMode GetVersion LoadLibraryA GetProcAddress GetModuleFileNameA FreeLibrary lstrcmpiA GetEnvironmentVariableA GetWindowsDirectoryA LocalAlloc LocalFree GlobalUnlock GlobalHandle GlobalFree GlobalAlloc GlobalLock WinExec _llseek GetDriveTypeA lstrcatA FindClose FindFirstFileA GetCurrentDirectoryA SetCurrentDirectoryA lstrlenA lstrcpyA _lread DosDateTimeToFileTime _lcreat _lopen _lclose

gdi32

SetTextColor SetTextAlign GetTextExtentPoint32A GetBkColor DeleteObject SetBkColor ExtTextOutA CreateDCA GetDeviceCaps CreateFontIndirectA DeleteDC SelectObject

advapi32

RegQueryValueA

Name

.text

Size

17KB

Virtual Size

16KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

512B

Virtual Size

146B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

3KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

Talk It!.exe

shell32

user32

kernel32

gdi32

advapi32

generic