General

  • Target

    f44a2e793869580d5ae3e71976166c625bd4cbdb298839850ed7663314e33f0e

  • Size

    100KB

  • MD5

    1d5a5cde9a59ca4166f9e748897323da

  • SHA1

    a11c831ae2fcc1d884ea71b7d791ae435e3d0957

  • SHA256

    f44a2e793869580d5ae3e71976166c625bd4cbdb298839850ed7663314e33f0e

  • SHA512

    1333eef70199e17905785ce827c2bc8d5256df11c94a3d904900e69a1066a9ad7af7a3f403467533658a3ce7d418bef5f4bbaef24bf3ffa1605c8874fe767e52

  • SSDEEP

    1536:Zoaj1hJL1S9t0MIeboal8bCKxo7h0RPaaml0Nz30rtrJxK:K0hpgz6xGhZamyF30BNxK

Score
10/10

Malware Config

Signatures

  • Detects executables built or packed with MPress PE compressor 1 IoCs
  • Sakula family
  • Sakula payload 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • f44a2e793869580d5ae3e71976166c625bd4cbdb298839850ed7663314e33f0e
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections