sakula | 0000b2fef428e92dae29996f177423dbf82e49523eaf70d03bc698114ab5d859

General

Target
0000b2fef428e92dae29996f177423dbf82e49523eaf70d03bc698114ab5d859
Size 160KB
Sample220212-p5fswaecdn
SHA256 0000b2fef428e92dae29996f177423dbf82e49523eaf70d03bc698114ab5d859
MD5 6b60534ec20df1e8423bcdcad0c84a5a
SHA1 217e86417141ee18d60759f55e0f973844459287
SHA512 1db010eff2ceb248dc1dd42fdd3693c5aada8e347b01cb57d9b4ade6b56e9ef74394491dc7ff76912460fc2324c5777ed41998f5a7ce8650a4a07d6129c20bde
SSDEEP 1536:aoaj1hJL1S9t0MIeboal8bCKxo7h0RP3G7z30rtrcnJdr8SZeBsCXKTn/:F0hpgz6xGhsGH30BQnP8S8BsZ/
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

upx sakula

Sakula Payload 1 IoCs

resource	yara_rule
sample	family_sakula

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

SHA256 0000b2fef428e92dae29996f177423dbf82e49523eaf70d03bc698114ab5d859
MD5 6b60534ec20df1e8423bcdcad0c84a5a
SHA1 217e86417141ee18d60759f55e0f973844459287
SHA512 1db010eff2ceb248dc1dd42fdd3693c5aada8e347b01cb57d9b4ade6b56e9ef74394491dc7ff76912460fc2324c5777ed41998f5a7ce8650a4a07d6129c20bde
SSDEEP 1536:aoaj1hJL1S9t0MIeboal8bCKxo7h0RP3G7z30rtrcnJdr8SZeBsCXKTn/:F0hpgz6xGhsGH30BQnP8S8BsZ/
MD5 SHA1 SHA512 SSDEEP

windows x86

Sakula Payload
UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx

Minor OS version

Major OS version

Entry point

17029

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED

PDB paths