SkibidiSploit[.]exe | Triage

Sharing

General

Target

SkibidiSploit.exe
Size

18.1MB
MD5

744114a73abcbb53bb9add88d1d8e4bb
SHA1

53771b8bad032d963186ca9c5844f38fce7b6f0a
SHA256

33953161606e811921928cd7825cc7f9e713dde38f4c5f79b6215833337e9bc1
SHA512

050782a852d2b4963df621357a741d5efd66ecf55a8f244685895726453557147fde79d78be60795d9f17ec9e5e1fb7c675e35bc0fae9bea52550a5887f8605f
SSDEEP

393216:KQPnnngDLRsE2+qBvtgaYjfw7SCKH3pLHkIe6gdMM7eQEr:l4hs4+Z3WCMLHktuMu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SkibidiSploit.exe

Files

SkibidiSploit.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Aurel\source\repos\Voltsploit\Voltsploit\bin\Release\obf\Dotfuscated\Hydra.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 18.1MB - Virtual size: 18.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ