sakula | 01d187ee2ff476f6012d1d2282b1add255ee925816f1c8aa45e3fd5d4b937804

General

Target
01d187ee2ff476f6012d1d2282b1add255ee925816f1c8aa45e3fd5d4b937804
Size 150KB
Sample220212-ph4lesdhgm
SHA256 01d187ee2ff476f6012d1d2282b1add255ee925816f1c8aa45e3fd5d4b937804
MD5 d01cddec757b037d8709b5a489b1f070
SHA1 f9ff9e4caaaf05f9dc4c8eb9bc2082e717a4dce3
SHA512 52c6b4110833ccbc300cec69fd2d26e17583e3fefee68816998b6a30dd0643c71b7b24a774a42d2e4e991aaae7f5fc0f91511648aa7538d46e37dcaa40dde232
SSDEEP 3072:H29DkEGRQixVSjLLJ30BWPOt5dQw+hyuGDInwU:H29qRfVSnt30Bbt+IhDFU
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

sakula

Sakula Payload 1 IoCs

resource	yara_rule
sample	family_sakula

SHA256 01d187ee2ff476f6012d1d2282b1add255ee925816f1c8aa45e3fd5d4b937804
MD5 d01cddec757b037d8709b5a489b1f070
SHA1 f9ff9e4caaaf05f9dc4c8eb9bc2082e717a4dce3
SHA512 52c6b4110833ccbc300cec69fd2d26e17583e3fefee68816998b6a30dd0643c71b7b24a774a42d2e4e991aaae7f5fc0f91511648aa7538d46e37dcaa40dde232
SSDEEP 3072:H29DkEGRQixVSjLLJ30BWPOt5dQw+hyuGDInwU:H29qRfVSnt30Bbt+IhDFU
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

18234

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED

PDB paths