PO[.]2402986[.]PDF[.]exe | Triage

Submit
Reports

Overview

overview

Static

static

1

PO.2402986.PDF.exe

windows7-x64

PO.2402986.PDF.exe

windows10-2004-x64

Resubmissions

13-04-2023 16:44

230413-t8tlcsea6x 10

31-03-2023 18:26

230331-w269zscd64 10

Sharing

Static task

static1

Behavioral task

behavioral1

Sample

PO.2402986.PDF.exe

Resource

win7-20230220-en

agenttesla collection evasion keylogger persistence spyware stealer trojan

windows7-x64

16 signatures

150 seconds

Behavioral task

behavioral2

Sample

PO.2402986.PDF.exe

Resource

win10v2004-20230220-en

agenttesla collection evasion keylogger persistence spyware stealer trojan

windows10-2004-x64

15 signatures

150 seconds

General

Target

PO.2402986.PDF.exe
Size

1.3MB
MD5

6ac943b332528abd3402c0954145bf05
SHA1

8a17715627e7017d2b45c09f4c978917880e2876
SHA256

bddee346a47d5cfbc48964020142db3cc659930094f46f8d63c072422499c7ed
SHA512

69fd5ffb81c100caab99b7b4e02de092666d4b591248ca6b604b3aedd9405c9a94d6167a9c22bddb82e036bd991ae0da4115fd9337604c6e8aac94a65a928fb7
SSDEEP

24576:pE6VLynkgY8Lsz9JfAH4sx+dV8Iz7wMFaael:pEVY8We4ZeGfel

Score

1^/10

Malware Config

Signatures

Files

PO.2402986.PDF.exe
.exe windows x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

© 2018-2024

Terms | Privacy