release-windows.zip
- SHA256 83e35f0bb79648b3acacf5e862025b140864d5a5cc50933ed61534664b31dbd9
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
SKY.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
SKY.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
3 signatures
150 seconds
General
- Target release-windows.zip
- Size 21KB
- Sample261029-1ppxdstv9p
- SHA256 83e35f0bb79648b3acacf5e862025b140864d5a5cc50933ed61534664b31dbd9
- MD5 67d85cb23c69c2d603af669068bf9548
- SHA1 b05a09a2a0722abc0ea9cf551e31bc360c0e4ff8
- SHA512 c999e4867d7cd40fa16547f533a9669e8f38c24d73f4d319bbb71d1954081d85e24836d1343300e71bafc1ade1601de8aac4e4a3356bf95f7575e4a6eb11cb2e
- SSDEEP 384:zzYQgB0oj7x2GYBTj18OqSNWQ/1oTZH7HXsg/MHIP2BlKTcXIzKh9TnlE4nKXjz/:zzSJ/x3YFR8zSNWQi5lsIzE7X0zlR
- TLSH T1FDA2F10A46A331BADCDDAAF25004CA12AC80DF4553AE5671F4E456ED1CD9BFD00D7E78
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/SKY.dll
File Explorer
-
release-windows.zip.zip 21KB
-
SKY.dll.dll 44KB
-
SKY.inc3KB
SKY.dll
- IMPHASH 20eaf5707f774411e1a15c1824deea9d
- SHA256 b03c29f80fd7888a96989b0a212003fbd8615e380c647286fabcacdf76467c8f
- MD5 75349baa0daee7f6b12ccf07599d355b
- SHA1 6ad8603fba417cbccf59214a6d6a3c1c2050d851
- SHA512 dd80f879f23169453d1069e6d6c0694084d750ce9598d6d7c8af2cda16c0ee824cc306fea5a864b77ab1d32a1e0ceae53f240a748f4f3410d20c1a17fe546ec6
- SSDEEP 768:wFRxVNPWi2gxlAJdsjb9CqfvLHnw0//Cmj3kc0AQ5XcHYM:wFRDNR27JqjbIivTnwe7kvJMHYM
- TLSH T136135C22DE018675EB4D10B864746FAE957CECA02BA5A8E3FF1159BD6F440C2EF73109
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
32681
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
GetTickCount
GetCurrentProcess
VirtualProtect
GetModuleHandleA
K32GetModuleInformation
IsDebuggerPresent
InitializeSListHead
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
SleepConditionVariableSRW
WakeAllConditionVariable
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
vcruntime140
__CxxFrameHandler3
memset
__std_type_info_destroy_list
_except_handler4_common
__std_exception_destroy
_CxxThrowException
__std_exception_copy
memcpy
api-ms-win-crt-runtime-l1-1-0
_execute_onexit_table
_initterm_e
_initialize_onexit_table
_initterm
_cexit
_seh_filter_dll
_initialize_narrow_environment
_configure_narrow_argv
api-ms-win-crt-heap-l1-1-0
realloc
_callnewh
malloc
free
api-ms-win-crt-stdio-l1-1-0
__acrt_iob_func
__stdio_common_vsprintf
__stdio_common_vfprintf
api-ms-win-crt-math-l1-1-0
_libm_sse2_sqrt_precise
_fdclass
_libm_sse2_sin_precise
_libm_sse2_cos_precise
AmxLoad
AmxUnload
Load
Supports
Unload
Name
.text
Size
32KB
Virtual Size
31KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
6KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
1024B
Virtual Size
466KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
512B
Virtual Size
480B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=8, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=4, id=257, version=35207,
count=4, id=259, version=35207,
count=10, id=260, version=35207,
count=20, id=261, version=35207,
count=3, id=257, version=33140,
count=58, id=1, productName=Unmarked objects,
count=1, id=260, version=35214,
count=15, id=261, version=35214,
count=1, id=256, version=35214,
count=1, id=255, version=35214,
count=1, id=258, version=35214,
SKY.inc
- SHA256 cffab8f146d971a8de13355407d059fa8b6eb835bf30a66916123e8758501da1
- MD5 69ab17580b630f62f6c88ae2d7d2af93
- SHA1 508622d95edda9ad51b0a53cc316054eb89644f7
- SHA512 01e970f5816ce232591060954b01c2d5496606fecad4dfb820ff37d28a67b9ff5f89538fffb51de284225c2ea444529686143865da55148503e55edbf00dd63c
- TLSH T10C612262771516308D3081C5B07EB092BAAEB3ADC270A725F4DCB21C441F6DC6B56CBB
- MD5 SHA1 SHA512 TLSH