Behavioral task
behavioral1
Sample
skuld.exe
Resource
win11-20240508-en
General
-
Target
skuld.exe
-
Size
4.4MB
-
MD5
22ef3d53af076d28a80953f3c0b5b34d
-
SHA1
de15f8d6fcfc8600ba5e30a71efef2bb94e1b2c0
-
SHA256
a5e034ded8a5d19ee16f364db3964b429651979bb5c0fc05a0b5c42a294a2575
-
SHA512
2b8bd5c17a60055df32bcbc205234249378bbea33f8aa1296d4afc14db7aa96ba66d7bc0df654d8f1b442da8ae1d81636080ad56007274ab3ccc3528866c3f46
-
SSDEEP
98304:TBZAJplurYZj/SdmcJM9Bidn8EIzCIoChy:TBIlI8j/CBejh
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource skuld.exe
Files
-
skuld.exe.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
UPX0 Size: - Virtual size: 10.2MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4.4MB - Virtual size: 4.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE