sakula | 0bbd67e1b7d8f2bafcf1f2e0d1b519ede36d4b5ace22c762a9c52a262f609a32N

General

Target
0bbd67e1b7d8f2bafcf1f2e0d1b519ede36d4b5ace22c762a9c52a262f609a32N
Size 99KB
Sample241019-1cb5rssbnn
SHA256 0bbd67e1b7d8f2bafcf1f2e0d1b519ede36d4b5ace22c762a9c52a262f609a32
MD5 49e8a5b631b6f78da7aabcf7d84ef2d0
SHA1 65c349a0a9f157811874abd92712dfb8e8a28847
SHA512 8c2249c3b04273d4b6c64e6b853711514c7eb5a3a7906e4ca1a5c8f69bd3f8db51e20ac2773bcbf29217d975fe99526aa89bf94d562ab0380cf1dfe561fa6ed5
SSDEEP 1536:Eoaj1hJL1S9t0MIeboal8bCKxo7h0RPaaml0Nz30rtrRx5:/0hpgz6xGhZamyF30BNx5
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

sakula

Sakula payload 1 IoCs

resource	yara_rule
sample	family_sakula

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0bbd67e1b7d8f2bafcf1f2e0d1b519ede36d4b5ace22c762a9c52a262f609a32N

SHA256 0bbd67e1b7d8f2bafcf1f2e0d1b519ede36d4b5ace22c762a9c52a262f609a32
MD5 49e8a5b631b6f78da7aabcf7d84ef2d0
SHA1 65c349a0a9f157811874abd92712dfb8e8a28847
SHA512 8c2249c3b04273d4b6c64e6b853711514c7eb5a3a7906e4ca1a5c8f69bd3f8db51e20ac2773bcbf29217d975fe99526aa89bf94d562ab0380cf1dfe561fa6ed5
SSDEEP 1536:Eoaj1hJL1S9t0MIeboal8bCKxo7h0RPaaml0Nz30rtrRx5:/0hpgz6xGhZamyF30BNx5
MD5 SHA1 SHA512 SSDEEP

Minor OS version

1

Major OS version

5

Entry point

17029

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED

PDB paths