Static task
static1
Behavioral task
behavioral1
Sample
SKYY-DEV.exe
Resource
win10-20230220-en
General
-
Target
SKYY-DEV.exe
-
Size
1.6MB
-
MD5
348ecf487e075ef9015dbf1940e23ecb
-
SHA1
3ea8ec60a933b003580fd045724a91e456582e8a
-
SHA256
8b6e91727b3f4b370be571b8d29fc084c4aa78fbde2c8160367e61685edf92d0
-
SHA512
0434e75a0c42cdbdf6bfa4399778ef20dee9bdf21ec220b4a6d456081c14d83999f91043aaa09825518e7fdc1996ef785ca7f75c4aad4f4979a83d2a88da62c1
-
SSDEEP
12288:HGbp+ciH2qmmR6elrUxNYqahMKgmKwFVrqq3OpvLZh1Ly+x2nf/sX9:z52qscwxNY0QKwFpqq3OpvNh1Onf
Malware Config
Signatures
Files
-
SKYY-DEV.exe.exe windows x64
de9d189a27854da14319250fbcfb0e98
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
d3d11
D3D11CreateDeviceAndSwapChain
kernel32
GetModuleHandleA
GetProcAddress
VirtualFree
VirtualAlloc
HeapCreate
HeapFree
Thread32Next
Thread32First
GetCurrentThreadId
SuspendThread
ResumeThread
CreateToolhelp32Snapshot
HeapReAlloc
HeapAlloc
GetThreadContext
GetCurrentProcessId
GetModuleHandleW
FlushInstructionCache
SetThreadContext
OpenThread
GetUserDefaultLocaleName
GetModuleFileNameA
K32GetModuleFileNameExA
AllocConsole
IsDebuggerPresent
Process32First
K32GetProcessMemoryInfo
Process32Next
lstrcmpiA
GetProcessTimes
DeviceIoControl
OpenFileById
GetFinalPathNameByHandleA
GetLogicalDriveStringsA
GetStartupInfoW
CreateEventW
WaitForSingleObjectEx
ResetEvent
SetEvent
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
EnterCriticalSection
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
WideCharToMultiByte
MultiByteToWideChar
GetFileInformationByHandleEx
MoveFileExW
GetLastError
AreFileApisANSI
GetTempPathW
GetFullPathNameW
GetFileAttributesExW
GetFileAttributesW
FindNextFileW
FindFirstFileExW
FindClose
CreateFileW
FormatMessageA
LocalFree
QueryPerformanceFrequency
GlobalUnlock
GlobalLock
GlobalFree
GlobalAlloc
TerminateProcess
VirtualQueryEx
GetSystemInfo
GetCurrentProcess
GetFileTime
CloseHandle
CreateFileA
VirtualQuery
ReadProcessMemory
InitializeSListHead
OpenProcess
Sleep
GetSystemTimeAsFileTime
QueryPerformanceCounter
VirtualProtect
user32
TranslateMessage
MoveWindow
PeekMessageA
GetWindowRect
DispatchMessageA
FindWindowA
ShowWindow
LoadIconA
UpdateWindow
DestroyWindow
DefWindowProcA
CreateWindowExA
UnregisterClassA
RegisterClassExA
GetKeyState
LoadCursorA
PostQuitMessage
ScreenToClient
GetCapture
ClientToScreen
MessageBoxA
IsChild
MessageBoxExW
GetForegroundWindow
MessageBoxW
SetCapture
SetCursor
GetClientRect
MessageBoxExA
ReleaseCapture
GetWindowTextLengthA
SetCursorPos
EnumWindows
GetClassNameA
GetWindowThreadProcessId
SetClipboardData
GetClipboardData
EmptyClipboard
GetCursorPos
OpenClipboard
CloseClipboard
advapi32
GetTokenInformation
RegEnumValueA
RegOpenKeyExA
RegQueryInfoKeyA
OpenServiceA
QueryServiceStatusEx
AdjustTokenPrivileges
RegGetValueA
LookupPrivilegeValueA
OpenProcessToken
OpenSCManagerA
CloseServiceHandle
RegEnumKeyA
shell32
SHGetPathFromIDListW
msvcp140
?_Xout_of_range@std@@YAXPEBD@Z
?_Winerror_map@std@@YAHH@Z
?_Xbad_function_call@std@@YAXXZ
?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A
?_Fiopen@std@@YAPEAU_iobuf@@PEBDHH@Z
?_Xlength_error@std@@YAXPEBD@Z
?_Syserror_map@std@@YAPEBDH@Z
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ
?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ
?always_noconv@codecvt_base@std@@QEBA_NXZ
??Bid@locale@std@@QEAA_KXZ
?uncaught_exception@std@@YA_NXZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEAD_J@Z
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
?_Throw_Cpp_error@std@@YAXH@Z
_Cnd_do_broadcast_at_thread_exit
?wcout@std@@3V?$basic_ostream@_WU?$char_traits@_W@std@@@1@A
_Thrd_id
_Xtime_get_ticks
_Thrd_join
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@_J@Z
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ
??0_Lockit@std@@QEAA@H@Z
??1_Lockit@std@@QEAA@XZ
imm32
ImmReleaseContext
ImmSetCompositionWindow
ImmGetContext
d3dcompiler_43
D3DCompile
xinput1_3
ord4
ord2
vcruntime140_1
__CxxFrameHandler4
vcruntime140
__current_exception
_CxxThrowException
__C_specific_handler
__std_exception_destroy
__std_exception_copy
__std_terminate
strstr
__current_exception_context
memset
_purecall
memchr
memcmp
memcpy
memmove
__std_type_info_compare
api-ms-win-crt-stdio-l1-1-0
__p__commode
_set_fmode
fflush
freopen
fclose
__stdio_common_vsscanf
_wfopen
fgetc
fseek
__acrt_iob_func
fwrite
ftell
fputc
__stdio_common_vsprintf
fgetpos
_get_stream_buffer_pointers
_fseeki64
fread
fsetpos
ungetc
setvbuf
api-ms-win-crt-heap-l1-1-0
realloc
_callnewh
_set_new_mode
malloc
free
api-ms-win-crt-convert-l1-1-0
strtod
atoi
strtoull
strtol
strtoll
api-ms-win-crt-filesystem-l1-1-0
_lock_file
_unlock_file
api-ms-win-crt-locale-l1-1-0
localeconv
___lc_codepage_func
_configthreadlocale
api-ms-win-crt-runtime-l1-1-0
_register_thread_local_exe_atexit_callback
system
_c_exit
_exit
_initterm_e
_initterm
_get_narrow_winmain_command_line
_set_app_type
terminate
quick_exit
_seh_filter_exe
_cexit
_crt_atexit
_register_onexit_function
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_errno
exit
_wassert
_invalid_parameter_noinfo_noreturn
_beginthreadex
api-ms-win-crt-environment-l1-1-0
getenv
api-ms-win-crt-string-l1-1-0
strncmp
strcmp
isdigit
api-ms-win-crt-utility-l1-1-0
rand
qsort
srand
api-ms-win-crt-math-l1-1-0
acosf
_dclass
cosf
__setusermatherr
powf
sqrtf
sinf
floorf
ceilf
ldexp
api-ms-win-crt-time-l1-1-0
strftime
_localtime64
ntdll
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
Sections
.text Size: 571KB - Virtual size: 571KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 873KB - Virtual size: 873KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 25KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 176KB - Virtual size: 175KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 1012B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ