Behavioral task
behavioral1
Sample
98099e5b5bfdbc94f477af2aa269f21d1eac4fafeae9be6421fcfa58e5d0397a.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
98099e5b5bfdbc94f477af2aa269f21d1eac4fafeae9be6421fcfa58e5d0397a.exe
Resource
win10v2004-20230220-en
General
-
Target
98099e5b5bfdbc94f477af2aa269f21d1eac4fafeae9be6421fcfa58e5d0397a.zip
-
Size
83KB
-
MD5
713f62bcae1eddbdaad5d07afda5fa67
-
SHA1
8db2980a434ba6e6faef7a54164c83cb9b91ce98
-
SHA256
9a7456facf46adc49a54090f3e2d807a215a8c9648d32466c74abacb53c34e6d
-
SHA512
93d7ebd1b910cd41746d24c4ac44182e95a06c5ef4b3cd0d9dc39651ab31e79abb739d536b1b6a60f0c7eba504b629fa8dc2243cd7fbb694aa8e1aeafdd3275f
-
SSDEEP
1536:HwLtiDlkKpr7r1tqS0jy5P3XvPKLcQevjhanxWQmvMVi0BF2fWZda7kLRTAfwQIv:HwsKUzHNvPWHejhOxW/ai0f2fBolTAfI
Malware Config
Extracted
agenttesla
Protocol: smtp- Host:
mail.goaelectronics.co.in - Port:
587 - Username:
[email protected] - Password:
Tourism@2021 - Email To:
[email protected]
Signatures
-
Agenttesla family
Files
-
98099e5b5bfdbc94f477af2aa269f21d1eac4fafeae9be6421fcfa58e5d0397a.zip.zip
Password: infected
-
98099e5b5bfdbc94f477af2aa269f21d1eac4fafeae9be6421fcfa58e5d0397a.exe.exe windows x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 164KB - Virtual size: 164KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ