sakula | 01eb8f0fac9fd0468af410a465e33efaca495f987e560b8b37bc8db708ec0a1f

General

Target
01eb8f0fac9fd0468af410a465e33efaca495f987e560b8b37bc8db708ec0a1f
Size 150KB
Sample220212-pg14xadhfl
SHA256 01eb8f0fac9fd0468af410a465e33efaca495f987e560b8b37bc8db708ec0a1f
MD5 5efa57299ac5c142337015e90faf1bf4
SHA1 912667d20a3025e2dc88e39dfc5dd5659d9bca0c
SHA512 3cf85389d4c4f7ef5a1fb175ace58e187fb3ede71dda113618042e0a21e439590640cd33ba15e60841f7ce206a50bab15614478dc98aedceeaf5c0746bebe9dc
SSDEEP 3072:H29DkEGRQixVSjLLJ30BWPOt5dQw+hyuGDInwS:H29qRfVSnt30Bbt+IhDFS
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

sakula

Sakula Payload 1 IoCs

resource	yara_rule
sample	family_sakula

SHA256 01eb8f0fac9fd0468af410a465e33efaca495f987e560b8b37bc8db708ec0a1f
MD5 5efa57299ac5c142337015e90faf1bf4
SHA1 912667d20a3025e2dc88e39dfc5dd5659d9bca0c
SHA512 3cf85389d4c4f7ef5a1fb175ace58e187fb3ede71dda113618042e0a21e439590640cd33ba15e60841f7ce206a50bab15614478dc98aedceeaf5c0746bebe9dc
SSDEEP 3072:H29DkEGRQixVSjLLJ30BWPOt5dQw+hyuGDInwS:H29qRfVSnt30Bbt+IhDFS
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

18234

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED

PDB paths