talk-it[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
talk-it.exe
Size 380KB
Sample261102-dn2hgaew3s
SHA256 f98c8e52840a6c473d6d3fec1d66f8e2101571220cdaa438c956f8e466898fd1
MD5 4ca7dfe8d8e692ee21117c73feda5b32
SHA1 ac029338153ce11b9d36e89f14c96b67cc794be3
SHA512 4b35c9e70af0ca1f60e3c19c26094cfe73e595fecae42e5b93790a5620fb16d515950dec0b1372bf90348d55dcca0c6eff31c3e4582892f2514c5958204b9cd9
SSDEEP 6144:TMM8fApOSxvbaiwb7AyT21XOHxXAsEbzdJMM8fApLMM8fApZMM8fAptMM8fApm:N8f8vbad7Aya0R4n8f48fc8fq8ft
TLSH
T1EE84E042B9A0C7B3C4AC0DFDD93B7A9FBA67C89A55190233E65065F0E461583EB1C18F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
talk-it.exe

File Explorer

talk-it.exe

.exe 380KB

talk-it.exe

IMPHASH 6528ff49b29691f162bd41cb206544ac
SHA256 f98c8e52840a6c473d6d3fec1d66f8e2101571220cdaa438c956f8e466898fd1
MD5 4ca7dfe8d8e692ee21117c73feda5b32
SHA1 ac029338153ce11b9d36e89f14c96b67cc794be3
SHA512 4b35c9e70af0ca1f60e3c19c26094cfe73e595fecae42e5b93790a5620fb16d515950dec0b1372bf90348d55dcca0c6eff31c3e4582892f2514c5958204b9cd9
SSDEEP 6144:TMM8fApOSxvbaiwb7AyT21XOHxXAsEbzdJMM8fApLMM8fApZMM8fAptMM8fApm:N8f8vbad7Aya0R4n8f48fc8fq8ft
TLSH
T1EE84E042B9A0C7B3C4AC0DFDD93B7A9FBA67C89A55190233E65065F0E461583EB1C18F
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

13806

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

shell32

ShellExecuteA FindExecutableA

user32

DefWindowProcA BeginPaint GetSysColor GetClientRect SetRect EndPaint SetWindowWord GetWindowWord RegisterClassA OemToCharA OemToCharBuffA LoadCursorA DestroyWindow SetWindowTextA SendMessageA EnableWindow PostMessageA GetLastActivePopup ShowWindow SetTimer KillTimer DialogBoxIndirectParamA GetWindowRect GetSystemMetrics EndDialog GetKeyState PeekMessageA TranslateMessage DispatchMessageA GetParent SetDlgItemTextA SendDlgItemMessageA GetDlgItem InvalidateRect UpdateWindow wsprintfA MessageBoxA SetCursor SetWindowPos GetDlgItemTextA

kernel32

CreateDirectoryA GetVolumeInformationA _lwrite SetFileTime LocalFileTimeToFileTime RtlUnwind GetCommandLineA GetModuleHandleA ExitProcess SetErrorMode GetVersion LoadLibraryA GetProcAddress GetModuleFileNameA FreeLibrary lstrcmpiA GetEnvironmentVariableA GetWindowsDirectoryA LocalAlloc LocalFree GlobalUnlock GlobalHandle GlobalFree GlobalAlloc GlobalLock WinExec _llseek GetDriveTypeA lstrcatA FindClose FindFirstFileA GetCurrentDirectoryA SetCurrentDirectoryA lstrlenA lstrcpyA _lread DosDateTimeToFileTime _lcreat _lopen _lclose

gdi32

SetTextColor SetTextAlign GetTextExtentPoint32A GetBkColor DeleteObject SetBkColor ExtTextOutA CreateDCA GetDeviceCaps CreateFontIndirectA DeleteDC SelectObject

advapi32

RegQueryValueA

Name

.text

Size

17KB

Virtual Size

16KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

512B

Virtual Size

146B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

3KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

talk-it.exe

shell32

user32

kernel32

gdi32

advapi32

generic