General
-
Target
sectoprat.exe
-
Size
496KB
-
MD5
191dd7393cac9cfa620ff5098a7c8b57
-
SHA1
a1d15bdc1565667a3b2baea49370b8e00338cbc3
-
SHA256
dc9f46bbf54d2f02111cea740cd4071246b2123348d0c5ff4f6df81dc672d00e
-
SHA512
c81e7ab85d0b458eb497feb5f031b28c2746a62f69aec7293caad77060e69018feb583c407edda7525195308ec9b7b2340c44a97fa954d0a871aebad18fa5a33
-
SSDEEP
6144:7lBYO4yjEb17TcMz5/hQluj0oGWA9HowGD9kh0vIOnP09Xlz34bKeA68tZTOaoWm:haO4Xb1740ZDw+vIcs9Xlz1E8tF
Score
10/10
Malware Config
Signatures
-
SectopRAT payload 1 IoCs
resource yara_rule sample family_sectoprat -
Sectoprat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource sectoprat.exe
Files
-
sectoprat.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 471KB - Virtual size: 471KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ