Behavioral task
behavioral1
Sample
d186dcc2a8ea35e6daed4be2dae14bfa.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
d186dcc2a8ea35e6daed4be2dae14bfa.exe
Resource
win10v2004-20230221-en
General
-
Target
d186dcc2a8ea35e6daed4be2dae14bfa.bin
-
Size
264KB
-
MD5
d186dcc2a8ea35e6daed4be2dae14bfa
-
SHA1
4404078c9e82e7f6923a81a457712925250a5417
-
SHA256
e1f0d2ea92de08acf518853ceab93a24ceb03ecc9ada30235b94a78d869aa47f
-
SHA512
393d03b2afbae0429ed9dcb033bd162d8275c3cb484de824ed596207285f30f6488c4bf0d96ffbae552ed11e52bacae8deae20d7cf550c7e398821aada828111
-
SSDEEP
3072:XGybM97hOQ/iK2jrOyipV/XbKjvx18lDs46cMsE+JDdjIREZeGGNTW9HGM8AWuX2:2DthOzj8VzKSDB6cM4pmKv18RYyuw0V
Malware Config
Signatures
-
Agenttesla family
Files
-
d186dcc2a8ea35e6daed4be2dae14bfa.bin.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 49KB - Virtual size: 49KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 168KB - Virtual size: 168KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ