Skelly-XVM[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Skelly-XVM.exe
Size

1.8MB
MD5

57c00c4f780b397a5ec6b4dff2cd8301
SHA1

7dbb4e502b6b4d257bf79f449825d918fb5d0698
SHA256

0b28d5086aabca7f9c0dbb83d0c942b840e450f8b87e691a3eb0e360bf1f6719
SHA512

098e8e8849b4f2c836cb629ed51471f738a9c2079c885d4ee9de09cd194defb04c990f88e3b0b956108304903270b15d80d7d0a973aae44ed90ec7872cb4b2e3
SSDEEP

49152:mubWVuXw9b8ro0kl1xUamWqZdANEO6AN2DE:mxVu4bYkl1xU3XO6AN2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Skelly-XVM.exe

Files

Skelly-XVM.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.8MB - Virtual size: 1.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ