Behavioral task
behavioral1
Sample
b40d1df45c1dba407a1d0e969d076e7278b648f94633c74d10ceee2c3f81f9b7.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
b40d1df45c1dba407a1d0e969d076e7278b648f94633c74d10ceee2c3f81f9b7.exe
Resource
win10v2004-20230220-en
General
-
Target
b40d1df45c1dba407a1d0e969d076e7278b648f94633c74d10ceee2c3f81f9b7.exe
-
Size
169KB
-
MD5
16a92911eafba2cb829d29223fc9b0e3
-
SHA1
855b6b83d3252e18141bfeeb4f6068607d991489
-
SHA256
b40d1df45c1dba407a1d0e969d076e7278b648f94633c74d10ceee2c3f81f9b7
-
SHA512
b21c52e8f74501e61ee2750a47b4ae82c7ec21a096d6848e396d4a542be1451b77fff73bf5ed3f517688b511a4d8b276f59e6e377c950e2454ead346a730f40f
-
SSDEEP
3072:j1nYgl94b6tGXFv7XLTNjImvkYK/QE5G3PwLxUXt/h0Y4T3A3Fp0:j1nYgtG3jLK/0oH3ED
Malware Config
Extracted
agenttesla
https://discord.com/api/webhooks/1081900989902241792/rFoN7jlk0MR9o77RpDTjOrhpsFg6tisJf4nr5Ve5BgdWMpUtC-5sPLHRnlZHzX0I_4Pg
Signatures
-
Agenttesla family
Files
-
b40d1df45c1dba407a1d0e969d076e7278b648f94633c74d10ceee2c3f81f9b7.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 166KB - Virtual size: 166KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ