sakula | a1fee89b08c2efed52dc1869e371d19c10813b9d64b9d48d53ab46475f08aa6e

General

Target
a1fee89b08c2efed52dc1869e371d19c10813b9d64b9d48d53ab46475f08aa6e
Size 150KB
Sample220327-mm35cagee7
SHA256 a1fee89b08c2efed52dc1869e371d19c10813b9d64b9d48d53ab46475f08aa6e
MD5 0ba9883b897c6f4508594c9908c6810a
SHA1 91fd59bbcff52bcf72034b11d9d982ccd2fc1bac
SHA512 bfc4a41e1675dd6602db39fbadfe1d4db79e10ae0396e8caa034e596cdb422247254a5333fbef52a0611668e9dee2664f918a687910c54baf44cf8b737b8b1dd
MD5 SHA1 SHA512

Score

10^/10

sakula

Sakula Payload 1 IoCs

resource	yara_rule
sample	family_sakula

SHA256 a1fee89b08c2efed52dc1869e371d19c10813b9d64b9d48d53ab46475f08aa6e
MD5 0ba9883b897c6f4508594c9908c6810a
SHA1 91fd59bbcff52bcf72034b11d9d982ccd2fc1bac
SHA512 bfc4a41e1675dd6602db39fbadfe1d4db79e10ae0396e8caa034e596cdb422247254a5333fbef52a0611668e9dee2664f918a687910c54baf44cf8b737b8b1dd
MD5 SHA1 SHA512

windows x86

Minor OS version

Major OS version

Entry point

18234

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED

PDB paths