skid[.]exe | Triage

Sharing

General

Target

skid.exe
Size

304KB
MD5

02059bde9b515c629c95f2fef795ce75
SHA1

ef8edac8265c0506fdc8fa8076e2cd236e75104a
SHA256

741d0c5a7202831610d44cab36d823e557239cc205407e5ac6c78694a974de28
SHA512

cf3f83a7fe56dd1f97d5d919fa00e1b3b9929498fd152257c958aac0537b8b15b97280bf53e6f704f07780b961dd87a7e8b00f93be43f95300c114ac190bb51b
SSDEEP

1536:kKvxaXV2p2kzOlbrboDkIJ9Mk3ETp8sXwQlfh828qbNScwLBJbdhCGH+4V+p:kKvx2VmjzOpboDXmN9pmdztq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
skid.exe

Files

skid.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 37KB - Virtual size: 37KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 266KB - Virtual size: 265KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ