Behavioral task
behavioral1
Sample
skuld.exe
Resource
win11-20240508-en
General
-
Target
skuld.exe
-
Size
4.5MB
-
MD5
93d1821f7360cbf3b0ef058588f70f28
-
SHA1
091e83dacc5f3183cf990beedb37a38893363667
-
SHA256
eae5b8c0b4e158a757528b58250d2276f82b2ef8db806031acb68e77e7f4dc5c
-
SHA512
feba8bd7ec73e614da860c41736a7b3019425c2ac4caa7bbb1f44b69aed7c500d473d8a2f0e733c1ed70aae4c4b7e4447c6de48be0c21732009c7d0b2a601b8b
-
SSDEEP
98304:KA/tra/pDftwKwiZIi9T6Od/opkFBqZj9KED0zpoP7k:KA1aBz6KpbXQpkI6yY
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource skuld.exe
Files
-
skuld.exe.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
UPX0 Size: - Virtual size: 10.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4.5MB - Virtual size: 4.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE