Static task
static1
Behavioral task
behavioral1
Sample
Shipping Document PL&BL Draft.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
Shipping Document PL&BL Draft.exe
Resource
win10v2004-20220414-en
General
-
Target
9872404dec861a257b694f7c41f7f8b54cbbbaeea302162ba5c376fe130c461e
-
Size
256KB
-
MD5
9c9f8cf7097e424198669caf94cb4937
-
SHA1
15866cee76cc25a94b7e11617a014b933953770d
-
SHA256
9872404dec861a257b694f7c41f7f8b54cbbbaeea302162ba5c376fe130c461e
-
SHA512
9a137ae1a4d757e803244d6867558f1f8fddc1310ba9c83a5dbc5188e429c40961074cd39e42a7df90c6b10f298e9355e81fe3855575a7130f7ad50ee61b9beb
-
SSDEEP
6144:BLOZOLXFMzOLQJNio0C6aBa3lRRFIxExmctbyKI/PDxuu:BLOiezOsYao3lRF9tb2/VP
Malware Config
Signatures
-
Agenttesla family
Files
-
9872404dec861a257b694f7c41f7f8b54cbbbaeea302162ba5c376fe130c461e.rar
-
Shipping Document PL&BL Draft.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 605KB - Virtual size: 605KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ