Behavioral task
behavioral1
Sample
a499adf007df84fc58178a1fd861138c078731760bea948501259c8e83e19783.exe
Resource
win7-20240903-en
General
-
Target
a499adf007df84fc58178a1fd861138c078731760bea948501259c8e83e19783.exe
-
Size
768KB
-
MD5
2b209f07c6251e367835fbf30e7c348e
-
SHA1
cd5534d4871aeba9351941cf548b2e63f492a609
-
SHA256
a499adf007df84fc58178a1fd861138c078731760bea948501259c8e83e19783
-
SHA512
95fe64d09ad91a8db600969279834e8ef6bbc2371fe3afdd3d88f351cddc858a4b247bcbae1d4351914e0ab720d9372e342e2513c68d64086afc7c388fc0678d
-
SSDEEP
12288:uvsXZv8km0OHcbGbvzWHz0HnquwMr+g0ssFWylkkoAbtEgIwfNqbYS2VbICKMIUx:ZfPz0HvSg0ssFlSjBcT
Malware Config
Signatures
-
SectopRAT payload 1 IoCs
resource yara_rule sample family_sectoprat -
Sectoprat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a499adf007df84fc58178a1fd861138c078731760bea948501259c8e83e19783.exe
Files
-
a499adf007df84fc58178a1fd861138c078731760bea948501259c8e83e19783.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 766KB - Virtual size: 765KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ