sakula | 00294abacc05833597cb3a039250919efc152945e5b64e54b332e52fc0316e8b

General

Target
00294abacc05833597cb3a039250919efc152945e5b64e54b332e52fc0316e8b
Size 150KB
Sample220212-p3qv3aecbp
SHA256 00294abacc05833597cb3a039250919efc152945e5b64e54b332e52fc0316e8b
MD5 0efd3f211f8e6cbd171dab5c02e9eb02
SHA1 1afbf883fb29cc9bc470a4192624bcb30aaa7a83
SHA512 6ab0e77a601c80f41b50140d7b21ab0f09d7f08060a4a727a2970164c486a438d096dc9807f349a46ac3ae377064b65fc20284d54d289542108af2d9367a8734
SSDEEP 3072:H29DkEGRQixVSjLLJ30BWPOt5dQw+hyuGDInwJ:H29qRfVSnt30Bbt+IhDFJ
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

sakula

Sakula Payload 1 IoCs

resource	yara_rule
sample	family_sakula

SHA256 00294abacc05833597cb3a039250919efc152945e5b64e54b332e52fc0316e8b
MD5 0efd3f211f8e6cbd171dab5c02e9eb02
SHA1 1afbf883fb29cc9bc470a4192624bcb30aaa7a83
SHA512 6ab0e77a601c80f41b50140d7b21ab0f09d7f08060a4a727a2970164c486a438d096dc9807f349a46ac3ae377064b65fc20284d54d289542108af2d9367a8734
SSDEEP 3072:H29DkEGRQixVSjLLJ30BWPOt5dQw+hyuGDInwJ:H29qRfVSnt30Bbt+IhDFJ
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

18234

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED

PDB paths