Static task
static1
Behavioral task
behavioral1
Sample
12e377bcf7e275ea5b3142eca1284f8a41d4377fa77cbf1902fc8e19cc11af1c.exe
Resource
win7-en-20211208
Behavioral task
behavioral2
Sample
12e377bcf7e275ea5b3142eca1284f8a41d4377fa77cbf1902fc8e19cc11af1c.exe
Resource
win10v2004-en-20220113
General
-
Target
12e377bcf7e275ea5b3142eca1284f8a41d4377fa77cbf1902fc8e19cc11af1c
-
Size
150KB
-
MD5
2b10d065123204407e22611ba8310132
-
SHA1
0cda344d84951c391ff7c758dcf331b3dfc7ca1d
-
SHA256
12e377bcf7e275ea5b3142eca1284f8a41d4377fa77cbf1902fc8e19cc11af1c
-
SHA512
b5dcf778b300fc37330aa92c8ad2c80bc9cbd3bb6decb1b67a470f9a421a486be690b3e867dd56beb1ef6128991b9ca9d6b7ec323cdc1743407291d4ab3b6864
-
SSDEEP
3072:H29DkEGRQixVSjLLJ30BWPOt5dQw+hyuGDInw3:H29qRfVSnt30Bbt+IhDF3
Malware Config
Signatures
-
Sakula Payload 1 IoCs
Processes:
resource yara_rule sample family_sakula -
Sakula family
Files
-
12e377bcf7e275ea5b3142eca1284f8a41d4377fa77cbf1902fc8e19cc11af1c.exe windows x86
Code Sign
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.Upack Size: 107KB - Virtual size: 108KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 36KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE