Behavioral task
behavioral1
Sample
4a7ff7faeec49310c6894526f002ee69.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
4a7ff7faeec49310c6894526f002ee69.exe
Resource
win10v2004-20230220-en
General
-
Target
4a7ff7faeec49310c6894526f002ee69.bin
-
Size
240KB
-
MD5
4a7ff7faeec49310c6894526f002ee69
-
SHA1
db48f0490b97fee21c061de6141cfcea918c560c
-
SHA256
385abf879288dd3d6eb208787438d6cf62deb7667ae5a60d3360e975d5d69697
-
SHA512
a18b2e88b3b656d058af5329f0785f28e6b3f98d03e08cf4c8e8e942f51c0c935275b7e801806b74fbfa15f3c3a49b620432136f5595bd29467c717d47277577
-
SSDEEP
3072:S5KAkrt0CSvK+Wq0FcLlclDczUsYE8H1fbKantT3b9qj76siCP6rX/ez:SA2CMLc4UfP9bKstT3oj76siCirPez
Malware Config
Signatures
-
Agenttesla family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4a7ff7faeec49310c6894526f002ee69.bin
Files
-
4a7ff7faeec49310c6894526f002ee69.bin.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 215KB - Virtual size: 215KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ