Behavioral task
behavioral1
Sample
2988630x00000000004000000.exe
Resource
win7-20230703-en
Behavioral task
behavioral2
Sample
2988630x00000000004000000.exe
Resource
win10v2004-20230703-en
General
-
Target
2988630x00000000004000000.dmp
-
Size
192KB
-
MD5
d195dcab73affa315b1ac491fa36b6c5
-
SHA1
6ea95c45a4b5bac786796c6a5a4b8e0e2b968ac0
-
SHA256
a1283ddcca4780be02493556091abd9bd6ab657a7a7a37991ed365102f239858
-
SHA512
fa3c251e10bac7d23feaacf53ff1dcff29553248a11c3583b57b4b2bea919d84da9107c922737619190a8f868f653b12eba90314f5659d27cc03fa90787a7074
-
SSDEEP
3072:Lz2JgeGUCzbvMiigeLFTDRjj1KAsTZvjAJEYEVQ0L4ZX5L:e8UCzbvw5LFTDRjj5spsKYsF4R
Malware Config
Signatures
-
Agenttesla family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2988630x00000000004000000.dmp
Files
-
2988630x00000000004000000.dmp.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 162KB - Virtual size: 161KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ