sakula | 15232ccc41e4f75f8285bb38f5972b5a8af76b86e4353bbac8092b0ad9966914 | Triage

Sharing

General

Target

15232ccc41e4f75f8285bb38f5972b5a8af76b86e4353bbac8092b0ad9966914
Size

101KB
MD5

821f0619fd68771620bc71e4b5219fde
SHA1

5b5d9c59252b05514c842b0d510215f3e69dd3bd
SHA256

15232ccc41e4f75f8285bb38f5972b5a8af76b86e4353bbac8092b0ad9966914
SHA512

e03006abd36208c18802479712fda94ac39ae5d0b01675a7693ef304a5002ab6b55cb544a768fe877b3e0f09da42beab61f7e008049ae66af4d015f215e8221d
SSDEEP

1536:Roaj1hJL1S9t0MIeboal8bCKxo7h0RPaaml0Nz30rtr2xL:i0hpgz6xGhZamyF30BKxL

Score

10^/10

sakula

Malware Config

Signatures

Sakula Payload 1 IoCs

Processes:

resource yara_rule

sample family_sakula
Sakula family
sakula

Files

15232ccc41e4f75f8285bb38f5972b5a8af76b86e4353bbac8092b0ad9966914
.exe windows x86

Code Sign

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.MPRESS1
Size: 92KB - Virtual size: 92KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.MPRESS2
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.imports
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE