Static task
static1
Behavioral task
behavioral1
Sample
2b219ee94ccd3dab012a2a6f5b55e4dde7f0e14d4df72caa6bc650c53ca1c0c1.exe
Resource
win7-20220311-en
Behavioral task
behavioral2
Sample
2b219ee94ccd3dab012a2a6f5b55e4dde7f0e14d4df72caa6bc650c53ca1c0c1.exe
Resource
win10v2004-en-20220113
General
-
Target
2b219ee94ccd3dab012a2a6f5b55e4dde7f0e14d4df72caa6bc650c53ca1c0c1
-
Size
152KB
-
MD5
f7472ef3bf3eec34a8503a80c264a71d
-
SHA1
ce6c4e674052635bc019ef58e6da6873495d67dc
-
SHA256
2b219ee94ccd3dab012a2a6f5b55e4dde7f0e14d4df72caa6bc650c53ca1c0c1
-
SHA512
cd9c97347ff5f18a94aeb03a120eff7df189d6f4b5da2d42864b995b5ff2fbc2e121076bcea37c218bbe2323a07dc4f46417d244e2220a590bffed3c353b95e8
Malware Config
Signatures
-
Sakula Payload 1 IoCs
Processes:
resource yara_rule sample family_sakula -
Sakula family
Files
-
2b219ee94ccd3dab012a2a6f5b55e4dde7f0e14d4df72caa6bc650c53ca1c0c1.exe windows x86
Code Sign
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.Upack Size: 107KB - Virtual size: 108KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 36KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE