Behavioral task
behavioral1
Sample
c308c105bb3c6f534bb056ef74e86a0c89cd64547474de18420c3b465a609e3c.exe
Resource
win7-20240220-en
General
-
Target
c308c105bb3c6f534bb056ef74e86a0c89cd64547474de18420c3b465a609e3c.exe
-
Size
767KB
-
MD5
e387c202a1f3034039c372208fa5c113
-
SHA1
3353e3e24f0777b6e9d874414a5d52c819b98570
-
SHA256
c308c105bb3c6f534bb056ef74e86a0c89cd64547474de18420c3b465a609e3c
-
SHA512
95903725868c2046be3b2998bcbbb791b0925069ee028027332ac03974f8de05a619b6b22bf1c447df0fab6e51e2a3bc663e36ee0d1cb73ebf82080dc380c492
-
SSDEEP
12288:oiMA0ejRLfxLY8flLb1MgXjIb4AsFWylkkoAbtEzm4srT:YeDxttLjQ4AsFlSjK
Malware Config
Signatures
-
SectopRAT payload 1 IoCs
resource yara_rule sample family_sectoprat -
Sectoprat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c308c105bb3c6f534bb056ef74e86a0c89cd64547474de18420c3b465a609e3c.exe
Files
-
c308c105bb3c6f534bb056ef74e86a0c89cd64547474de18420c3b465a609e3c.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 765KB - Virtual size: 764KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ