Behavioral task
behavioral1
Sample
skuld.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
skuld.exe
Resource
win10v2004-20241007-en
General
-
Target
skuld.exe
-
Size
7.5MB
-
MD5
123ed4573b0c7b489f0e25777ccd39e1
-
SHA1
14c644a91b6ca0f6bcc731e40617cb012a8b6553
-
SHA256
475779eca55ad58973f1da315fc8be958315d6e34751ba6da4be2b1a6736b201
-
SHA512
6acf6ca3ae4af3b2a679139ecf93bf506862a5fc47229f0b86ebb37147b8df3a19a9ffc60fe41906c54bd5d1968814336ee149a68e9671f4dc4535afefb06af4
-
SSDEEP
196608:6+59cxLEdZwmNV8quEu/0crKmAP1nnv7jiUm9+sFkluKq+L9zc:6+5qLEMc8qXu4NqUm0Hl8+R
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource skuld.exe
Files
-
skuld.exe.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
UPX0 Size: - Virtual size: 7.8MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 7.5MB - Virtual size: 7.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE