Behavioral task
behavioral1
Sample
9133b62cf224ab836d86d3aff622629e91730a557ade8fc281261a9f49e7b319.exe
Resource
win7-20231215-en
General
-
Target
9133b62cf224ab836d86d3aff622629e91730a557ade8fc281261a9f49e7b319.exe
-
Size
820KB
-
MD5
cc8f56e23b5803bf1fbfe5a2b8fcb28d
-
SHA1
25bff308eb6e33cbf4b94e98cf6e3e2e9f845b09
-
SHA256
9133b62cf224ab836d86d3aff622629e91730a557ade8fc281261a9f49e7b319
-
SHA512
dac8d1201f0e2a3065c5b3af40dbf9718620222efe4e35164131ff47ae834281ef5156dde94193106f9ceebea5d2e1b006de21e9c910ebe8cb711e9cf8127490
-
SSDEEP
12288:0vAzqb0aVcdzBEbk+ZFtHcwnt7o4ayE11xtwuK3t1:0Izqb0zpBmZF3M4JEoXv
Malware Config
Signatures
-
SectopRAT payload 1 IoCs
resource yara_rule sample family_sectoprat -
Sectoprat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9133b62cf224ab836d86d3aff622629e91730a557ade8fc281261a9f49e7b319.exe
Files
-
9133b62cf224ab836d86d3aff622629e91730a557ade8fc281261a9f49e7b319.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 817KB - Virtual size: 817KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ