Static task
static1
Behavioral task
behavioral1
Sample
0baba892c72de9fc745662dc974b48df2b2cc4e5526ddb88d5dc03499de6d207.exe
Resource
win7-en-20211208
Behavioral task
behavioral2
Sample
0baba892c72de9fc745662dc974b48df2b2cc4e5526ddb88d5dc03499de6d207.exe
Resource
win10v2004-en-20220113
General
-
Target
0baba892c72de9fc745662dc974b48df2b2cc4e5526ddb88d5dc03499de6d207
-
Size
100KB
-
MD5
6f8d9cf2e6bc9a2551aeca323a539044
-
SHA1
3e45aa1c19e3776cdccfffa54981b103dfc723b7
-
SHA256
0baba892c72de9fc745662dc974b48df2b2cc4e5526ddb88d5dc03499de6d207
-
SHA512
099fd89e84a0d2aef80affbe992e34a29dce996a090d8d0d5b951d12a65c59ba13e87a795bf382fbae84cd6057ed31810ebcd166c97f8749c1da92b9c81df7ae
-
SSDEEP
1536:5Loaj1hJL1S9t0MIeboal8bCKxo7h0RPJ0aml0Nz30rtra:m0hpgz6xGh+0amyF30Bm
Malware Config
Signatures
-
Sakula Payload 1 IoCs
Processes:
resource yara_rule sample family_sakula -
Sakula family
Files
-
0baba892c72de9fc745662dc974b48df2b2cc4e5526ddb88d5dc03499de6d207.exe windows x86
Code Sign
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.MPRESS Size: 92KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE