Static task
static1
General
-
Target
Skyline.fix.dll
-
Size
1.7MB
-
MD5
4c9daa09c9993a1d1df4b47194c13cba
-
SHA1
6f70bc1ab493479b6979be9b1f5cbd931e6ecfa9
-
SHA256
fc39d1b2b6bd2751a9370a74aefed3bfb36700ee0a1c326a3c108b7d56ce60b7
-
SHA512
10bb9bfb52a1ef0815fc4d3003c5a3f546f9bc7e5c540d6e1c4b66fc0ba120ca654bfd77450d23d040f528b5433d55297fdeb58668866d8ee43268af52c83952
-
SSDEEP
49152:+YlU6DpT/rdN7gP87K1WNThILyz7l043kXbMiPq1bC+YX400apr5/sp9JwGc2Bmt:+YlU6DpT/rdN7gP87K1WNThILyz7l046
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Skyline.fix.dll
Files
-
Skyline.fix.dll.dll windows:6 windows x64
9509bd594cd13803b33fe83f48f01573
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
Imports
kernel32
WritePrivateProfileStringA
CreateThread
FindResourceExW
LoadResource
FindResourceW
HeapAlloc
VirtualProtectEx
HeapDestroy
Beep
GetProcAddress
DeleteCriticalSection
GetCurrentProcessId
GetProcessHeap
WideCharToMultiByte
CreateDirectoryA
GetPrivateProfileStringA
GlobalAlloc
GlobalFree
GlobalLock
GlobalUnlock
LoadLibraryA
QueryPerformanceFrequency
QueryPerformanceCounter
VirtualFree
VirtualAlloc
GetSystemInfo
VirtualQuery
HeapCreate
VirtualProtect
GetCurrentProcess
Thread32Next
Thread32First
GetCurrentThreadId
SuspendThread
ResumeThread
CreateToolhelp32Snapshot
Sleep
CloseHandle
GetThreadContext
FlushInstructionCache
SetThreadContext
OpenThread
FindFirstFileW
HeapReAlloc
CreateFileW
CreateDirectoryW
GetLocaleInfoEx
FormatMessageA
LocalFree
FindNextFileW
GetFileAttributesExW
AreFileApisANSI
GetFileInformationByHandleEx
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
WakeAllConditionVariable
SleepConditionVariableSRW
IsDebuggerPresent
LockResource
GetLastError
MultiByteToWideChar
HeapSize
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsProcessorFeaturePresent
GetSystemTimeAsFileTime
InitializeSListHead
TerminateProcess
OutputDebugStringW
EnterCriticalSection
LeaveCriticalSection
CreateFileA
GetFileSizeEx
ReadFile
MapViewOfFile
UnmapViewOfFile
CreateFileMappingA
GetModuleHandleA
InitializeCriticalSectionEx
RaiseException
HeapFree
SizeofResource
FindClose
FindFirstFileExW
user32
ClientToScreen
GetForegroundWindow
GetCapture
ScreenToClient
LoadCursorW
GetMessageExtraInfo
GetKeyState
SetCapture
GetAsyncKeyState
SetCursor
GetCursorPos
EnumWindows
GetSystemMetrics
SetWindowLongPtrW
GetClientRect
IsWindowUnicode
ReleaseCapture
SetCursorPos
CallWindowProcW
GetWindowThreadProcessId
SetClipboardData
GetClipboardData
EmptyClipboard
CloseClipboard
OpenClipboard
TrackMouseEvent
msvcp140
?_Xbad_function_call@std@@YAXXZ
?_Winerror_map@std@@YAHH@Z
?_Syserror_map@std@@YAPEBDH@Z
?_Xout_of_range@std@@YAXPEBD@Z
?_Xlength_error@std@@YAXPEBD@Z
d3dx11_43
D3DX11CreateShaderResourceViewFromMemory
ntdll
RtlVirtualUnwind
RtlCaptureContext
RtlLookupFunctionEntry
imm32
ImmReleaseContext
ImmSetCandidateWindow
ImmGetContext
ImmSetCompositionWindow
d3dcompiler_43
D3DCompile
vcruntime140
__std_exception_copy
_CxxThrowException
__intrinsic_setjmp
__C_specific_handler
strstr
memcmp
memchr
memcpy
longjmp
strrchr
memmove
__std_type_info_destroy_list
memset
__std_exception_destroy
api-ms-win-crt-stdio-l1-1-0
fwrite
__stdio_common_vsscanf
_wfopen
fflush
__stdio_common_vfprintf
fseek
__acrt_iob_func
ftell
__stdio_common_vsprintf_s
fclose
__stdio_common_vsprintf
fread
api-ms-win-crt-filesystem-l1-1-0
remove
api-ms-win-crt-runtime-l1-1-0
_invalid_parameter_noinfo_noreturn
_errno
terminate
_seh_filter_dll
_configure_narrow_argv
_initterm_e
_initterm
_cexit
_crt_atexit
_execute_onexit_table
_register_onexit_function
_initialize_onexit_table
_initialize_narrow_environment
_invalid_parameter_noinfo
api-ms-win-crt-utility-l1-1-0
qsort
rand
api-ms-win-crt-heap-l1-1-0
malloc
free
_callnewh
api-ms-win-crt-convert-l1-1-0
strtol
atoi
atof
api-ms-win-crt-string-l1-1-0
strcmp
strncmp
strncpy
api-ms-win-crt-locale-l1-1-0
___lc_codepage_func
vcruntime140_1
__CxxFrameHandler4
api-ms-win-crt-math-l1-1-0
fmodf
cos
atan2f
powf
acosf
atan2
asinf
Sections
.text Size: 839KB - Virtual size: 838KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 586KB - Virtual size: 586KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 271KB - Virtual size: 276KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 32KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
_RDATA Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ