Static task
static1
Behavioral task
behavioral1
Sample
SweetPotato.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
SweetPotato.exe
Resource
win10v2004-20240226-en
General
-
Target
SweetPotato.exe
-
Size
904KB
-
MD5
07cd433b3218d2f592902ed86200cf87
-
SHA1
3346e161f12a8025f13316e9469ba54cbf6ff2bf
-
SHA256
494072da9b54381c4b40e55e6131db414797d450b562a67c45168fb3bb46a07c
-
SHA512
8a33db949b25d6c0b2d81022b92962bf391badb9c31131c5033c9c6c51a12fe6adc475f58f27c23a2ffaa8550e7e1d5aa318916db936bb85b3843c00df79c450
-
SSDEEP
24576:7dc8cY5G1FOPjWcjL8TxNYqEv0rODHZ/lpWUmJKfplz7qeQtk:75cY56OaccTtsWIZ/GUm0fpB7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource SweetPotato.exe
Files
-
SweetPotato.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 901KB - Virtual size: 901KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ