Static task
static1
Behavioral task
behavioral1
Sample
SkyBlade.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
SkyBlade.exe
Resource
win10v2004-20220812-en
General
-
Target
SkyBlade.exe
-
Size
912KB
-
MD5
5883218177428e9b6b745d4d1fadd548
-
SHA1
8a69a2f57315ba7a2acc4ea57617fe53530601c8
-
SHA256
bd9d87d46970aa03572e889033919c2d0f6cd368349942e3eb0ce9aa90f6f580
-
SHA512
402cee452dd2204a901d2c7a18b1202c637343c88026157bcf7343410a4cf2df2fc9f1514331f31bdc97b7bffc5c73e0f96f932400c5f47bf8e61d3ce61b3ee7
-
SSDEEP
24576:JQjzHwrM/a45myqVp1MkatKLvkEaHNYK3Xcd5lgn:ejl/a4yxmK7NahS3gn
Malware Config
Signatures
Files
-
SkyBlade.exe.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 70KB - Virtual size: 144KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 132KB - Virtual size: 804KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 32KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 364KB - Virtual size: 548KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.IOlYE7i Size: 310KB - Virtual size: 312KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE