Behavioral task
behavioral1
Sample
ec1ed563d84bb170900b25fc09663766d80242a318f68e31b3ea3954fd5f85b6.exe
Resource
win7-20240903-en
General
-
Target
ec1ed563d84bb170900b25fc09663766d80242a318f68e31b3ea3954fd5f85b6
-
Size
114KB
-
MD5
a8205d11cfeeb09621d2f88962cc5173
-
SHA1
5e546fde94cd7dcc2b37aa3f8d75a925fc054063
-
SHA256
ec1ed563d84bb170900b25fc09663766d80242a318f68e31b3ea3954fd5f85b6
-
SHA512
9de2da6d17b235d24c0b2d71716a75f553b99b599be2df48e2f72f18c162481b94da639591b2fe1f70f116720801ae08ee80d9e722ac079b967f6d0ed53a37bd
-
SSDEEP
1536:Loaj1hJL1S9t0MIeboal8bCKxo7h0RPLJNz30rtriCr0nJnHPoq1nouy8TRg4:c0hpgz6xGhYJF30Blr0nhoutTRg4
Malware Config
Signatures
-
Sakula family
-
Sakula payload 1 IoCs
resource yara_rule sample family_sakula -
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ec1ed563d84bb170900b25fc09663766d80242a318f68e31b3ea3954fd5f85b6
Files
-
ec1ed563d84bb170900b25fc09663766d80242a318f68e31b3ea3954fd5f85b6.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 66KB - Virtual size: 72KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 41KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE