Behavioral task
behavioral1
Sample
0fe23dbd118d32fbad5391b81b110948.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
0fe23dbd118d32fbad5391b81b110948.exe
Resource
win10v2004-20230220-en
General
-
Target
0fe23dbd118d32fbad5391b81b110948.bin
-
Size
192KB
-
MD5
0fe23dbd118d32fbad5391b81b110948
-
SHA1
708e96ad648f6b3d2a401afb1789e4ea3515729b
-
SHA256
69335500bfbf776e7d4af8b54509b65d08c348088968f858b102c129b2e1d495
-
SHA512
aa791c4353b2dde143b9766eb50f3962b4e59a263a2e547336170a75a51c4877ee2cc9741a1fbfd2326952b43a076d5e813a29ef5cc58a55c03c3f885e932c62
-
SSDEEP
3072:aLZNzp2wxS98mggVKWZ0iSa9XPh6l0h2VvJ/4lyi0BKLv8PJA:yJp2wxkRggVKWZ0/aNJ67VRwlyiSzP
Malware Config
Signatures
-
Agenttesla family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0fe23dbd118d32fbad5391b81b110948.bin
Files
-
0fe23dbd118d32fbad5391b81b110948.bin.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 162KB - Virtual size: 161KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ