Behavioral task
behavioral1
Sample
611f479e0b4bf0f32cf1a5295341117b.exe
Resource
win7-20241010-en
General
-
Target
611f479e0b4bf0f32cf1a5295341117b
-
Size
8.1MB
-
MD5
611f479e0b4bf0f32cf1a5295341117b
-
SHA1
a9136e2fbe4f23ac0e3e232bac55a3aa2afd2f7d
-
SHA256
0e3af16ff0398d0691732b542ba834f33600699bd61df7f300362ec0374c648d
-
SHA512
fc612ece8a61c10dd6203a6a796a585a755170c30ddb60d1fdc25725ea83acea2d70f89fc67a0fc935bde44402203db6dd9be67ce96f6f1ea169a4ba99bc2c55
-
SSDEEP
196608:++9MGrMaA1hWg6PQiHV5/SAGocGiiAh0B4:++SvaBTPQiHV56icB
Malware Config
Signatures
-
SectopRAT payload 1 IoCs
resource yara_rule sample family_sectoprat -
Sectoprat family
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 611f479e0b4bf0f32cf1a5295341117b
Files
-
611f479e0b4bf0f32cf1a5295341117b.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
Size: 96KB - Virtual size: 96KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ