Behavioral task
behavioral1
Sample
489fa400791fe53a3554d9d7b24699ab.exe
Resource
win7-20230712-en
General
-
Target
489fa400791fe53a3554d9d7b24699ab.exe
-
Size
474KB
-
MD5
489fa400791fe53a3554d9d7b24699ab
-
SHA1
6733fcc921ab92d84878fac415cb312df544d447
-
SHA256
c7fb6ed40e705854d8122133998fd11f1792759a5697e032e940bdbde2984569
-
SHA512
89b31d84bfadf30dfc052ee3913c54f03dbf3f01e38b28c535c85a0b6e30f1a07881705a99fddc457d5c10a7ac15ebb96bc0497a63d85a0f94d6fbccdbe9c33b
-
SSDEEP
6144:tlBYO4yjEb17TcMz5/hQluj0oGWA9HowGD9kh0vIOnP05Xlz34n3eA69tZTOaoWh:vaO4Xb1740ZDw+vIcs5XlzME9tF
Malware Config
Signatures
-
SectopRAT payload 1 IoCs
resource yara_rule sample family_sectoprat -
Sectoprat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 489fa400791fe53a3554d9d7b24699ab.exe
Files
-
489fa400791fe53a3554d9d7b24699ab.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 471KB - Virtual size: 471KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ