Behavioral task
behavioral1
Sample
528620x00000000004000000x.exe
Resource
win7-20230621-en
Behavioral task
behavioral2
Sample
528620x00000000004000000x.exe
Resource
win10v2004-20230621-en
General
-
Target
528620x00000000004000000x.dmp
-
Size
192KB
-
MD5
d5267c3bc7c3c86ed29da3020575429e
-
SHA1
59d281869a41dde88fedc85652a3adbdf4b6fd34
-
SHA256
e505bf04dbda6c4e8dc510482af3837663a04cba8d3711ae13641b4fb6ba9bc2
-
SHA512
99aa98201cb0e8f561b96a52791332a0f1b1761b89591c2b4d5111c0da3d2dd4fe7b4b4b02dffad4e536d23175f739779b4a8641cb5a35ff2616491be280fc06
-
SSDEEP
3072:c1FuXpew5WjDpCjW40Iv0b1jnak13s/vayxRdw7YlQJZpOxkp6l:h5WjDpCjW40IvWjnQBRdwEMZpOxU
Malware Config
Signatures
-
Agenttesla family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 528620x00000000004000000x.dmp
Files
-
528620x00000000004000000x.dmp.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 162KB - Virtual size: 162KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ