Behavioral task
behavioral1
Sample
16106327e0f82e5dc072bdee4d24a64885dc4d9afa6436683f271bb1bc1898a4.exe
Resource
win7-20240903-en
General
-
Target
16106327e0f82e5dc072bdee4d24a64885dc4d9afa6436683f271bb1bc1898a4.exe
-
Size
768KB
-
MD5
89f9361fb6c36052f0beb996819a178d
-
SHA1
181435f954930852c3b2e74da0144cfcd009a4de
-
SHA256
16106327e0f82e5dc072bdee4d24a64885dc4d9afa6436683f271bb1bc1898a4
-
SHA512
f09519a6b3e1f182bddf4fb24d320014edf01ab7fcefd2a49768f42e3313f590df64f9c402506877477a0b1bf5976560e4aaf51a0d76e09e5c728793220fa184
-
SSDEEP
12288:ovsXZv8km0OHcbGbvzWHz0HnquwQU+S0ssFWylkkoAbtEhTwfNqbYS2VbICKMIUr:rfPz0HbdS0ssFlSjtMR
Malware Config
Signatures
-
SectopRAT payload 1 IoCs
resource yara_rule sample family_sectoprat -
Sectoprat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 16106327e0f82e5dc072bdee4d24a64885dc4d9afa6436683f271bb1bc1898a4.exe
Files
-
16106327e0f82e5dc072bdee4d24a64885dc4d9afa6436683f271bb1bc1898a4.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 766KB - Virtual size: 765KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ