sakula | 102eb71f6331a75aa7dd22d92a61a53343418f17d3f1c2e0ce768ca92c205fff | Triage

Sharing

General

Target

102eb71f6331a75aa7dd22d92a61a53343418f17d3f1c2e0ce768ca92c205fff
Size

101KB
MD5

c7e21c596385813b1cf582976964cf7b
SHA1

9eba8cdc180d95cb274f995ae9ca9c4b7e74ca3b
SHA256

102eb71f6331a75aa7dd22d92a61a53343418f17d3f1c2e0ce768ca92c205fff
SHA512

7486637aed7fd4312a4f466a71f0c5248b0c06b60c0daf9fc51551c145c47f3e36073988b28e411ca760ddd21f33a1f2149128685a50a772021b979dbf5a26c6
SSDEEP

1536:Roaj1hJL1S9t0MIeboal8bCKxo7h0RPaaml0Nz30rtr2xM:i0hpgz6xGhZamyF30BKxM

Score

10^/10

sakula

Malware Config

Signatures

Sakula Payload 1 IoCs

Processes:

resource yara_rule

sample family_sakula
Sakula family
sakula

Files

102eb71f6331a75aa7dd22d92a61a53343418f17d3f1c2e0ce768ca92c205fff
.exe windows x86

Code Sign

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.MPRESS1
Size: 92KB - Virtual size: 92KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.MPRESS2
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.imports
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE