Static task
static1
Behavioral task
behavioral1
Sample
SecuriteInfo.com.Trojan-Spy.AgentTesla.14657.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
SecuriteInfo.com.Trojan-Spy.AgentTesla.14657.exe
Resource
win10v2004-20230220-en
General
-
Target
SecuriteInfo.com.Trojan-Spy.AgentTesla.14657.18018
-
Size
448KB
-
MD5
3c227ed0395aefbe231601bc6cc2e4e5
-
SHA1
390c7cc165c95a4822d1beea9f47f2a9e6937b63
-
SHA256
2c7f7a8e8c27851a393f2b66a6112a1fd6ab17891dbcc7f8e0f015c1dd0f4ee0
-
SHA512
4c1377a7e4a6e17d50149150cfa6aeeeca6dbf188f1a97a2036a7067d23ccc3ed84734d8e681b28907da6017fd81db0d7ffdf57a23c5a79e9ea5d6c610f87270
-
SSDEEP
12288:Hop0E9he/My5bcDOypZY/k8WQGDvE4C5ZlOVF:NOZy5bcDOypZgk8WQGD3yqF
Malware Config
Signatures
Files
-
SecuriteInfo.com.Trojan-Spy.AgentTesla.14657.18018.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 35KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 13.8MB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 20B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 80KB - Virtual size: 79KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ