Overview

overview

10

Static

static

10

NEAS.e0e00...JC.exe

windows7-x64

10

NEAS.e0e00...JC.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.e0e008afed3f62828f2a39d0a5e3940d_JC.exe

  • Size

    212KB

  • MD5

    e0e008afed3f62828f2a39d0a5e3940d

  • SHA1

    40e9a9ff4c89ddb57a386227746c160d7f2dd686

  • SHA256

    de6cea6c76cd6003716ea02db8189621c398a02d19fffbbab58fbe3b5e746963

  • SHA512

    4c2f439b138f6fcdb422ea3c49db2b06e2858961392a6086d54eeb14d3d6a918e0e1c6a4875be1edbe32272ef427770623eeb1f3a0d6746d50e1bc3fda3ddcc3

  • SSDEEP

    1536:NtQFl29mEkE0L1rDEKrxZKF2zf9g2Pl7W/MwbxMX++pdz30rtr8gjXjp0GanBo:A29DkEGRQixVSjLc130BYgjXjpUnBo

Score
10/10
upxsakula

Malware Config

Extracted

Family

sakula

C2

www.polarroute.com

Signatures

  • Sakula family
    sakula
  • Sakula payload 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • NEAS.e0e008afed3f62828f2a39d0a5e3940d_JC.exe
    .exe windows:5 windows x86

    4511896d043677e4ab4578dc5bcab5a0


    Headers

    Imports

    Sections