Behavioral task
behavioral1
Sample
d61f8c8b016bf721dcbaee946065dce0.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
d61f8c8b016bf721dcbaee946065dce0.exe
Resource
win10v2004-20230220-en
General
-
Target
d61f8c8b016bf721dcbaee946065dce0.bin
-
Size
192KB
-
MD5
d61f8c8b016bf721dcbaee946065dce0
-
SHA1
3fee70173d76b62d78e886873c5051e740fbcd2a
-
SHA256
a3d334a39c125e3fe76cd51031f162891d7dc7ccf81703d6795b04bf65382c6b
-
SHA512
528396011a0b9fe75fc34ba01940ebea36dd52c7c45edd9bce608be642f9c341ed4f7e7207f9013b693626b3bca6a4a3715baea62b388389b8520323d78afb67
-
SSDEEP
3072:sGyG9WaWcN19/NAbCN1cLqNGjup1FpKBqVVbzhB:0aVtECNOLjuDmaVnh
Malware Config
Signatures
-
Agenttesla family
Files
-
d61f8c8b016bf721dcbaee946065dce0.bin.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 162KB - Virtual size: 161KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ