Behavioral task
behavioral1
Sample
e0d1aa7466b556b564981ab7ba369255c05f957dac3ee302aa4056a224635846.exe
Resource
win7-20240708-en
General
-
Target
e0d1aa7466b556b564981ab7ba369255c05f957dac3ee302aa4056a224635846.exe
-
Size
768KB
-
MD5
38b37cca4768526f4b6ce1438063e9a2
-
SHA1
2fe8949e285946a33db3d27e27024d531c13cd62
-
SHA256
e0d1aa7466b556b564981ab7ba369255c05f957dac3ee302aa4056a224635846
-
SHA512
2727d2cd00787f92cb764c95cd265f83eb09b959b051389c97cc281852a199377e0f7e1a1124229ee8859e5c7d180d666295cf145260083b9b35b8d6785124ca
-
SSDEEP
12288:mvsXZv8km0OHcbGbvzWHz0Hnquw9J+70ssFWylkkoAbtE57wfNqbYS2VbICKMIUX:BfPz0Hmo70ssFlSjFh8
Malware Config
Signatures
-
SectopRAT payload 1 IoCs
resource yara_rule sample family_sectoprat -
Sectoprat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e0d1aa7466b556b564981ab7ba369255c05f957dac3ee302aa4056a224635846.exe
Files
-
e0d1aa7466b556b564981ab7ba369255c05f957dac3ee302aa4056a224635846.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 766KB - Virtual size: 765KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ