sakula | 18853782a49e124910d860f0391baa7e1eff8970781f6ffaf6daa887f540b8a6

General

Target
18853782a49e124910d860f0391baa7e1eff8970781f6ffaf6daa887f540b8a6
Size 150KB
Sample220212-dmfjlsfcd8
SHA256 18853782a49e124910d860f0391baa7e1eff8970781f6ffaf6daa887f540b8a6
MD5 585afb769d944c5d4876781d803ea8aa
SHA1 8011597c7983f954af5869c06e760d3e2cc603b1
SHA512 dd1f8d951360fc6b0a15126bd77bf6c2882d7a3871364f46fd93154ae81a6e43e4dfa3832dcdfbd6e59117a80998badd7e302ed3c39482f3d843096072c581d5
SSDEEP 3072:H29DkEGRQixVSjLLJ30BWPOt5dQw+hyuGDInw0v:H29qRfVSnt30Bbt+IhDFg
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

sakula

Sakula Payload 1 IoCs

resource	yara_rule
sample	family_sakula

SHA256 18853782a49e124910d860f0391baa7e1eff8970781f6ffaf6daa887f540b8a6
MD5 585afb769d944c5d4876781d803ea8aa
SHA1 8011597c7983f954af5869c06e760d3e2cc603b1
SHA512 dd1f8d951360fc6b0a15126bd77bf6c2882d7a3871364f46fd93154ae81a6e43e4dfa3832dcdfbd6e59117a80998badd7e302ed3c39482f3d843096072c581d5
SSDEEP 3072:H29DkEGRQixVSjLLJ30BWPOt5dQw+hyuGDInw0v:H29qRfVSnt30Bbt+IhDFg
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

18234

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED

PDB paths