skuld[.]exe | Triage

Sharing

General

Target

skuld.exe
Size

7.5MB
MD5

86cfaeefec2c4ce9bba60640d2d4dee7
SHA1

426c0ee6bc8ab22041afc53b25b7ef312a185a66
SHA256

5195c14f3b204c7fb8d9c3ec7df175fac89f3ff83485de64106e55d9b93f7989
SHA512

12b36bbbe28cbb2664d6bbea9a7569960a1b480af38867dfc099d7c823bf84cbca4443260acdaef4ac45f8a9d35b4b9bf3348a600138029a8b0165d324348f5a
SSDEEP

196608:1lNk+HyZDcdb7MSv5of5VWu0+yE8ToCFD:jNk+SBw7MSM5lMVF

Score

5^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
upx

Processes:

resource yara_rule

sample upx
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.

Processes:

resource

skuld.exe

Files

skuld.exe
.exe windows:6 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

UPX0
Size: - Virtual size: 7.8MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 7.5MB - Virtual size: 7.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX2
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE