General
-
Target
skuld_protected.exe
-
Size
8.2MB
-
MD5
ad3150edf8ee855775c52e238ff5060c
-
SHA1
1f2511823d022b4171a267fd0e311393d0ae64a1
-
SHA256
ca3adf71dbe2d3fdfcdeb3795a4fd94dc61f9a9faaece2be1fd86a89f6944112
-
SHA512
98f6e08c0adde68ce03e97e010303f8337c549207ebd3ac346a71dff351a982f075609ae840826c64c443a9396faec92a69170d3284ba3f9e2f7832e6b46429e
-
SSDEEP
196608:sLLAE+XWszpa977M5l1VtH0CK3dcjmpgr9yloTC0hxkjZDACmIkkL:ssBJzYU/HAcjYgrEf0hSjZDACm3u
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource skuld_protected.exe
Files
-
skuld_protected.exe.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
UPX0 Size: - Virtual size: 12.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 8.2MB - Virtual size: 8.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE