Behavioral task
behavioral1
Sample
aaca1d0a684091ceb9367a917719e5593de9337ec857afeb51719bf8994834cf.exe
Resource
win7-20241010-en
General
-
Target
aaca1d0a684091ceb9367a917719e5593de9337ec857afeb51719bf8994834cf
-
Size
768KB
-
MD5
f9026db46d3aba99ae513ebad80bbb6c
-
SHA1
fba300cffc1b94f5e95fde5b92b1616ff9e91808
-
SHA256
aaca1d0a684091ceb9367a917719e5593de9337ec857afeb51719bf8994834cf
-
SHA512
b864349a78c59e9646f0431245be4f0070f6af84369788b551b2fbc20eee6bd8a4897df9190fc420b5bfe1d1407814b324245039443329e723b7172210c3f0a4
-
SSDEEP
12288:uvsXZv8km0OHcbGbvzWHz0HnquwQU+S0ssFWylkkoAbtEhTwfNqbYS2VbICKMIUr:ZfPz0HbdS0ssFlSjtMR
Malware Config
Signatures
-
SectopRAT payload 1 IoCs
resource yara_rule sample family_sectoprat -
Sectoprat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource aaca1d0a684091ceb9367a917719e5593de9337ec857afeb51719bf8994834cf
Files
-
aaca1d0a684091ceb9367a917719e5593de9337ec857afeb51719bf8994834cf.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 766KB - Virtual size: 765KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ