Behavioral task
behavioral1
Sample
1858965825956207b9ea6d82c572053b.exe
Resource
win7-20240903-en
General
-
Target
1858965825956207b9ea6d82c572053b.exe
-
Size
768KB
-
MD5
1858965825956207b9ea6d82c572053b
-
SHA1
6379b1d16cd560fa5cb6ebef341a0b4afbd60e7c
-
SHA256
29675a28d7b5d3cb286b588b630c4193a4bf35bef9b2028264876ba662cb20d3
-
SHA512
8df34b13c447a28158c891b6adf7992d7b74d00f98ebc007e73a0cdf3ff3a195c9d553fe77a00ac2001d4fae49f96eb1a0aa13551ef4ca2ff6a8414fc793ff12
-
SSDEEP
12288:4vsXZv8km0OHcbGbvzWHz0HnquwFy+y0ssFWylkkoAbtETKwfNqbYS2VbICKMIU1:7fPz0HOLy0ssFlSjaI
Malware Config
Signatures
-
SectopRAT payload 1 IoCs
resource yara_rule sample family_sectoprat -
Sectoprat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1858965825956207b9ea6d82c572053b.exe
Files
-
1858965825956207b9ea6d82c572053b.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 766KB - Virtual size: 765KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ