SecuriteInfo[.]com[.]Trojan-Spy[.]AgentTesla[.]14657[.]18018[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

SecuriteInfo.com.Trojan-Spy.AgentTesla.14657.18018.exe
Size

1.4MB
MD5

518c01615d840e76662b9723673f91f1
SHA1

f72310a7c6e7f84627a4bb7ade5be621ff01f2a7
SHA256

40764003c3478b67dd418b90193b34c0518c84ca79000e0f6fb5693ebe0b583c
SHA512

43b3e4f4e334cc38df4eeda4cafe32a9aa7694876c8943c562a20349e242f23a31f47a15a24635727e2ff81b4b9848da4f2207e6ba06364de62395295e0bf74f
SSDEEP

24576:NOZy5bcDOypZgk8WQGD3yqM50+kD6yz15vL2GzYD9CD52Gy1BWBjkJ4uKVMeg:op9b/p69CD5kWBjkJ4DV4

Score

1^/10

Malware Config

Signatures

Files

SecuriteInfo.com.Trojan-Spy.AgentTesla.14657.18018.exe
.exe windows x86

Code Sign

05:ad:7d:a6:86:01:c6:d8:98:81:fc:ce:43:2c:90:13
Certificate

Issuer

CN=DigiCert High Assurance Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

17/11/2016, 00:00

Not After

21/11/2019, 12:00

Subject

CN=Network & Speed Limited,O=Network & Speed Limited,L=Hong Kong,ST=Hong Kong,C=HK

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66
Certificate

Issuer

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22/10/2014, 00:00

Not After

22/10/2024, 00:00

Subject

CN=DigiCert Timestamp Responder,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

02:c4:d1:e5:8a:4a:68:0c:56:8d:a3:04:7e:7e:4d:5f
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

11/02/2011, 12:00

Not After

10/02/2026, 12:00

Subject

CN=DigiCert High Assurance Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10/11/2006, 00:00

Not After

10/11/2021, 00:00

Subject

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageEmailProtection
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

06:5e:28:52:fb:7d:2f:96:de:b0:f4:bb:e8:57:76:dd
Certificate

Issuer

CN=DigiCert SHA2 High Assurance Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

17/11/2016, 00:00

Not After

21/11/2019, 12:00

Subject

CN=Network & Speed Limited,O=Network & Speed Limited,L=Hong Kong,ST=Hong Kong,C=HK

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0b:7e:10:90:3c:38:49:0f:fa:2f:67:9a:87:a1:a7:b9
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22/10/2013, 12:00

Not After

22/10/2028, 12:00

Subject

CN=DigiCert SHA2 High Assurance Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

09:c0:fc:46:c8:04:42:13:b5:59:8b:af:28:4f:4e:41
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

04/01/2017, 00:00

Not After

18/01/2028, 00:00

Subject

CN=DigiCert SHA2 Timestamp Responder,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0d:09:26:07:27:ca:4b:fa:66:36:bd:c5:60:a2:f3:a6:ef:91:37:a6:b7:af:0b:bf:cd:f6:d4:07:bd:d2:24:04
Signer

Actual PE Digest

0d:09:26:07:27:ca:4b:fa:66:36:bd:c5:60:a2:f3:a6:ef:91:37:a6:b7:af:0b:bf:cd:f6:d4:07:bd:d2:24:04

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Network & Speed Limited,O=Network & Speed Limited,L=Hong Kong,ST=Hong Kong,C=HK

27/02/2023, 09:30
Valid: false

89:94:b2:ee:71:54:d8:23:c2:02:39:a6:e4:16:26:ad:f6:2a:2d:77
Signer

Actual PE Digest

89:94:b2:ee:71:54:d8:23:c2:02:39:a6:e4:16:26:ad:f6:2a:2d:77

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Network & Speed Limited,O=Network & Speed Limited,L=Hong Kong,ST=Hong Kong,C=HK

28/02/2017, 09:33
Valid: false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 35KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 13.8MB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 20B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 80KB - Virtual size: 79KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 68KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Code Sign

05:ad:7d:a6:86:01:c6:d8:98:81:fc:ce:43:2c:90:13Certificate

Extended Key Usages

Key Usages

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66Certificate

Extended Key Usages

Key Usages

02:c4:d1:e5:8a:4a:68:0c:56:8d:a3:04:7e:7e:4d:5fCertificate

Extended Key Usages

Key Usages

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1bCertificate

Extended Key Usages

Key Usages

06:5e:28:52:fb:7d:2f:96:de:b0:f4:bb:e8:57:76:ddCertificate

Extended Key Usages

Key Usages

0b:7e:10:90:3c:38:49:0f:fa:2f:67:9a:87:a1:a7:b9Certificate

Extended Key Usages

Key Usages

09:c0:fc:46:c8:04:42:13:b5:59:8b:af:28:4f:4e:41Certificate

Extended Key Usages

Key Usages

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15Certificate

Extended Key Usages

Key Usages

0d:09:26:07:27:ca:4b:fa:66:36:bd:c5:60:a2:f3:a6:ef:91:37:a6:b7:af:0b:bf:cd:f6:d4:07:bd:d2:24:04Signer

Signature Validations

Verification

27/02/2023, 09:30 Valid: false

89:94:b2:ee:71:54:d8:23:c2:02:39:a6:e4:16:26:ad:f6:2a:2d:77Signer

Signature Validations

Verification

28/02/2017, 09:33 Valid: false

Headers

File Characteristics

Sections

CODE Size: 1.2MB - Virtual size: 1.2MB

DATA Size: 35KB - Virtual size: 34KB

BSS Size: - Virtual size: 13.8MB

.idata Size: 14KB - Virtual size: 13KB

.tls Size: - Virtual size: 20B

.rdata Size: 512B - Virtual size: 24B

.reloc Size: 80KB - Virtual size: 79KB

.rsrc Size: 68KB - Virtual size: 68KB

05:ad:7d:a6:86:01:c6:d8:98:81:fc:ce:43:2c:90:13
Certificate

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66
Certificate

02:c4:d1:e5:8a:4a:68:0c:56:8d:a3:04:7e:7e:4d:5f
Certificate

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b
Certificate

06:5e:28:52:fb:7d:2f:96:de:b0:f4:bb:e8:57:76:dd
Certificate

0b:7e:10:90:3c:38:49:0f:fa:2f:67:9a:87:a1:a7:b9
Certificate

09:c0:fc:46:c8:04:42:13:b5:59:8b:af:28:4f:4e:41
Certificate

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

0d:09:26:07:27:ca:4b:fa:66:36:bd:c5:60:a2:f3:a6:ef:91:37:a6:b7:af:0b:bf:cd:f6:d4:07:bd:d2:24:04
Signer

27/02/2023, 09:30
Valid: false

89:94:b2:ee:71:54:d8:23:c2:02:39:a6:e4:16:26:ad:f6:2a:2d:77
Signer

28/02/2017, 09:33
Valid: false

CODE
Size: 1.2MB - Virtual size: 1.2MB

DATA
Size: 35KB - Virtual size: 34KB

BSS
Size: - Virtual size: 13.8MB

.idata
Size: 14KB - Virtual size: 13KB

.tls
Size: - Virtual size: 20B

.rdata
Size: 512B - Virtual size: 24B

.reloc
Size: 80KB - Virtual size: 79KB

.rsrc
Size: 68KB - Virtual size: 68KB