Behavioral task
behavioral1
Sample
1945f37a8717d2db10a6b89e2875de2f.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
1945f37a8717d2db10a6b89e2875de2f.exe
Resource
win10v2004-20220901-en
General
-
Target
1945f37a8717d2db10a6b89e2875de2f.exe
-
Size
208KB
-
MD5
1945f37a8717d2db10a6b89e2875de2f
-
SHA1
93b7023c9c3facb09584040896755f86d4aabec3
-
SHA256
cc76fdba445e9a94c3b07ebed63997fa04b83e2b1ee9a3a141fd73335fcde9ef
-
SHA512
746b3ed7831a814005a1c06a165d73975b9ffacf476f7dd52c44308ecc2f5d5df7a7c7c7defb71eeaaca9c8866147b0fa8f6014065c4aced6af2763c46ab71bc
-
SSDEEP
6144:U9D1JTurNDzMHXrZ1dHpHCUUFASgYBcB8Rqdu2ZFGpf4nUcde:U9D1JT4DzMHXd1d9eBf4n3
Malware Config
Extracted
agenttesla
Protocol: ftp- Host:
%2B - Port:
21 - Username:
application/x-www-form-urlencoded - Password:
image/jpg
p=
Signatures
-
Agenttesla family
Files
-
1945f37a8717d2db10a6b89e2875de2f.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 206KB - Virtual size: 206KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 792B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ