General

  • Target
    skid.exe
  • Size 1.3MB
  • Sample261017-shqlcafe73
  • SHA256 058e7acdd99291ab7dcf5038bd92c9de0eeff226b7bf4f902796b4b7b690e88c
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

File Explorer

  • skid.exe
    .exe 1.3MB

skid.exe

  • IMPHASH a27fe17f6b6bdd855e3d003843f19982
  • SHA256 058e7acdd99291ab7dcf5038bd92c9de0eeff226b7bf4f902796b4b7b690e88c
  • MD5 SHA1 SHA512 SSDEEP TLSH
  • Unsigned PE

    Checks for missing Authenticode signature.

Minor OS version
0
Major OS version
6
Entry point
1055072
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
C:\Users\V\Desktop\cheatos\patched external by ryoku\Release\skid.pdb