Behavioral task
behavioral1
Sample
473e7b6e66d6809c6e40b6a54cb85423.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
473e7b6e66d6809c6e40b6a54cb85423.exe
Resource
win10v2004-20230220-en
General
-
Target
473e7b6e66d6809c6e40b6a54cb85423.bin
-
Size
192KB
-
MD5
473e7b6e66d6809c6e40b6a54cb85423
-
SHA1
336a02356d6da15c09109457104860177400d14a
-
SHA256
553dc86770eb0d0886f646a5026ba404b5f5592a9c307cf038924e7d90d1079c
-
SHA512
cfcda355ef7ac4a16212722240da1594583f471c679647c093c3b55f8b19752095fe032c066c5c24e89ba20b077d22a202409d5dabf206bff084000c1f36a47e
-
SSDEEP
3072:S7ObpdZZhQhzVR1cWwLuC1skc308OdCR2U+MdSyHFj8wMJDGEhKhuYml0MplpKld:cSZ7QhzV3cWwLhskc308OdCR2UjdSyH/
Malware Config
Signatures
-
Agenttesla family
Files
-
473e7b6e66d6809c6e40b6a54cb85423.bin.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 162KB - Virtual size: 161KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ