sakula | 7a4b31e4efd7b802ed908b2586464b2a

General

Target
7a4b31e4efd7b802ed908b2586464b2a
Size 150KB
Sample231222-jhv2dsecf6
SHA256 d1789f83fb761740fc362f49fa63772401e9360a11ad67ed7b28e55fd31a5a9b
MD5 7a4b31e4efd7b802ed908b2586464b2a
SHA1 a9a9e3a5efa81a9609f784ecc8d9e3191524c256
SHA512 47f04458166a318091717259b707e46c5e3561e58ea5eda034af66f736398156c1b446dca95f4b4f86bf39bc47bc4b93ee7159cbc76db383b18d32944806caee
SSDEEP 3072:H29DkEGRQixVSjLLJ30BWPOt5dQw+hyuGDInwo:H29qRfVSnt30Bbt+IhDFo
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

sakula

Family

C2

Sakula payload 1 IoCs

resource	yara_rule
sample	family_sakula

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7a4b31e4efd7b802ed908b2586464b2a

SHA256 d1789f83fb761740fc362f49fa63772401e9360a11ad67ed7b28e55fd31a5a9b
MD5 7a4b31e4efd7b802ed908b2586464b2a
SHA1 a9a9e3a5efa81a9609f784ecc8d9e3191524c256
SHA512 47f04458166a318091717259b707e46c5e3561e58ea5eda034af66f736398156c1b446dca95f4b4f86bf39bc47bc4b93ee7159cbc76db383b18d32944806caee
SSDEEP 3072:H29DkEGRQixVSjLLJ30BWPOt5dQw+hyuGDInwo:H29qRfVSnt30Bbt+IhDFo
MD5 SHA1 SHA512 SSDEEP

Minor OS version

0

Major OS version

4

Entry point

18234

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED

PDB paths