sakula | NEAS[.]9b5484509eba9951ca1814ef508ff380[.]exe

General

Target
NEAS.9b5484509eba9951ca1814ef508ff380.exe
Size 100KB
Sample231026-cyynwsbd47
SHA256 c6b206b72d3d925c0f3d71335f95b462cebba31993c0ab7bc04c185886ed73a4
MD5 9b5484509eba9951ca1814ef508ff380
SHA1 6ce50ea29c17a2d3f75a5e0c6f2dc8ada124b4b3
SHA512 a3fbcf68d975b162a326e275d59e69270abad7848c6f1bb4d06e850e902982723919bfb7b1a47d11ee0765206b3f0fa7fd42ebbb6ff95000011d61b40369bc21
SSDEEP 1536:Loaj1hJL1S9t0MIeboal8bCKxo7h0RPaaml0Nz30rtrsx7:c0hpgz6xGhZamyF30Box7
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

sakula

Sakula payload 1 IoCs

resource	yara_rule
sample	family_sakula

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.9b5484509eba9951ca1814ef508ff380.exe

SHA256 c6b206b72d3d925c0f3d71335f95b462cebba31993c0ab7bc04c185886ed73a4
MD5 9b5484509eba9951ca1814ef508ff380
SHA1 6ce50ea29c17a2d3f75a5e0c6f2dc8ada124b4b3
SHA512 a3fbcf68d975b162a326e275d59e69270abad7848c6f1bb4d06e850e902982723919bfb7b1a47d11ee0765206b3f0fa7fd42ebbb6ff95000011d61b40369bc21
SSDEEP 1536:Loaj1hJL1S9t0MIeboal8bCKxo7h0RPaaml0Nz30rtrsx7:c0hpgz6xGhZamyF30Box7
MD5 SHA1 SHA512 SSDEEP

Minor OS version

1

Major OS version

5

Entry point

17029

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED

PDB paths