Behavioral task
behavioral1
Sample
skuld.exe
Resource
win11-20240508-en
General
-
Target
skuld.exe
-
Size
4.5MB
-
MD5
9567893182e7ec2a793240e8e693ef69
-
SHA1
d89c04e8ed7a9944cd9af20e996dd367b0725f36
-
SHA256
82d2d5b5093c700df8097b03fb7dbe6101bde039bc818ad8720a42ef2f05a29f
-
SHA512
eede8a4474c5a3607cfba3c11ab8e904c9bbcec37f64ce13d4a96e6e56fc347ea962e682e0b9764cfb775b7b4a0d1b0e6e343abb3dcc5052994b31e1727f9a7f
-
SSDEEP
98304:dXR3wbnTy5fvSe0ELV1EEdERzN0Kepft7D4qZD2cbuMWb+xiQT2ds+M70:2TypvSeDLV1XdSziKAt7kqZHG+xX2dsl
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource skuld.exe
Files
-
skuld.exe.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
UPX0 Size: - Virtual size: 11.2MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4.5MB - Virtual size: 4.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE