sakula | NEAS[.]8f42e1693846cc01e1f85c0174114f30[.]exe

General

Target
NEAS.8f42e1693846cc01e1f85c0174114f30.exe
Size 100KB
Sample231107-b4waaahf21
SHA256 07fe46f6d97a8ea77ad9c0c64391dd73a67536e27e48d619ba9d987c79487e29
MD5 8f42e1693846cc01e1f85c0174114f30
SHA1 e0863599d991c7b16b77eb1c604018ca5dc875fb
SHA512 c307a36d4833739d1032a3e94341cdebba9ffed623837d6e5d0401ee093a7fd89d02994d425d11ca504b19f1e828b3d3db0233f4f8bb863d93a504ef8898d2f1
SSDEEP 1536:Loaj1hJL1S9t0MIeboal8bCKxo7h0RPaaml0Nz30rtrsxL:c0hpgz6xGhZamyF30BoxL
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

sakula

Sakula payload 1 IoCs

resource	yara_rule
sample	family_sakula

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.8f42e1693846cc01e1f85c0174114f30.exe

SHA256 07fe46f6d97a8ea77ad9c0c64391dd73a67536e27e48d619ba9d987c79487e29
MD5 8f42e1693846cc01e1f85c0174114f30
SHA1 e0863599d991c7b16b77eb1c604018ca5dc875fb
SHA512 c307a36d4833739d1032a3e94341cdebba9ffed623837d6e5d0401ee093a7fd89d02994d425d11ca504b19f1e828b3d3db0233f4f8bb863d93a504ef8898d2f1
SSDEEP 1536:Loaj1hJL1S9t0MIeboal8bCKxo7h0RPaaml0Nz30rtrsxL:c0hpgz6xGhZamyF30BoxL
MD5 SHA1 SHA512 SSDEEP

Minor OS version

1

Major OS version

5

Entry point

17029

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED

PDB paths