Behavioral task
behavioral1
Sample
1464630x00000000004000000.exe
Resource
win7-20230621-en
Behavioral task
behavioral2
Sample
1464630x00000000004000000.exe
Resource
win10v2004-20230703-en
General
-
Target
1464630x00000000004000000.dmp
-
Size
192KB
-
MD5
531e037810bc42446947ecdb40c19643
-
SHA1
50053f6a0896ebab237d606d73969bc7ff680ef1
-
SHA256
b56eb179a5a96d2c37f03be250d584105d6ed09d2f3748357f0566c429e447fd
-
SHA512
6ed76dc5291fc4c7e4aee991524c6581ab252000354050ae7f7660f0fc2d0d9e916701e356f8a3674d39cb6cc9a6784d57349245fe0f2b224994255ee1a5d5f1
-
SSDEEP
3072:xzz/FMbI24gQEjP+rBVRLYgJHrWEdEjk4wyKlfD4E:xzz/FMbIzGP+rZ7Xxlb
Malware Config
Signatures
-
Agenttesla family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1464630x00000000004000000.dmp
Files
-
1464630x00000000004000000.dmp.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 162KB - Virtual size: 161KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ