Static task
static1
Behavioral task
behavioral1
Sample
sky.exe
Resource
win7-20240220-en
General
-
Target
sky.exe
-
Size
739KB
-
MD5
41a104bfa8a22b25feb0a446f6605552
-
SHA1
a5f6adba4e742c729ae6e919f764600fb3ba4d3a
-
SHA256
4a2d38520f782650ba557b0bf4d04287f2098e6d785edc59285840e58da25991
-
SHA512
2280af991750cd66679165625978dbf9db0aab5c7455d7dbbd08a89ccfce99b176a2cfe4161f2323895a1b8b9961dce2d5ae965861dd0e587b47416b80aa6656
-
SSDEEP
12288:BSeU82DdeRnCJsgsgPAmQ2NGxhirAesq1oEU7fHLxLnvaQRdpaZlru:cdexyCTmbNGxhUAxNPfxLnvaQRdpaZlq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource sky.exe
Files
-
sky.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 23KB - Virtual size: 22KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 105KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ