Static task
static1
Behavioral task
behavioral1
Sample
bestelling0617_img.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
bestelling0617_img.exe
Resource
win10v2004-20220414-en
General
-
Target
452465e6ae5ed95bac8429eb7517fd5591c872932a352f33932dec36308e7b51
-
Size
862KB
-
MD5
563a054d977f8ee963aa0eb4c5b065dc
-
SHA1
19bf467927d04c12e13f6a5a9aad03efcd1a4172
-
SHA256
452465e6ae5ed95bac8429eb7517fd5591c872932a352f33932dec36308e7b51
-
SHA512
31bcb93df227536c45742d26c69b103dc17cde280c349ebc65cd9af252acec732b76fa6739520f975cdbe47f8aa72785239902bffa16dcbf93c0791e686868f3
-
SSDEEP
12288:JnKS3COrYTbmOaquLNQr7A3ZpOno5wNLn:ZSzbGquLqPACnIALn
Malware Config
Signatures
-
Agenttesla family
Files
-
452465e6ae5ed95bac8429eb7517fd5591c872932a352f33932dec36308e7b51.iso
-
bestelling0617_img.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 783KB - Virtual size: 783KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ