Behavioral task
behavioral1
Sample
05a7071cdc9e5e01002724ced19a38de.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
05a7071cdc9e5e01002724ced19a38de.exe
Resource
win10v2004-20220812-en
General
-
Target
05a7071cdc9e5e01002724ced19a38de.exe
-
Size
208KB
-
MD5
05a7071cdc9e5e01002724ced19a38de
-
SHA1
2f69651958987b8bb9206130d931aaeff05b404b
-
SHA256
c6d2ea73c236a8e1f0b7ebae369d715b4d401122010c6b285991e8ff12f2c8d1
-
SHA512
e7956ccd5bcec2ea07d8664e5551d546054b79d2a4e826f7636ac87f7cb2d2f332f5de872eeb79902e1f918c4ab3730a9f85ea677071427178e17e19c31f7a9e
-
SSDEEP
6144:/k70aEVeY9PPKRetUrUGHsR01MdIxsHU/HLF82G0g6YOYe:/k74VeY9PPTaXdGe
Malware Config
Extracted
agenttesla
Protocol: ftp- Host:
%2B - Port:
21 - Username:
application/x-www-form-urlencoded - Password:
image/jpg
p=
Signatures
-
Agenttesla family
Files
-
05a7071cdc9e5e01002724ced19a38de.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 206KB - Virtual size: 206KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 792B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ