Behavioral task
behavioral1
Sample
1952630x00000000004000000.exe
Resource
win7-20230703-en
Behavioral task
behavioral2
Sample
1952630x00000000004000000.exe
Resource
win10v2004-20230703-en
General
-
Target
1952630x00000000004000000.dmp
-
Size
192KB
-
MD5
b59534fe4a7fbd11dd4770fa1e640286
-
SHA1
388e7ab626dd830f92994f9cce4f9e516b51243c
-
SHA256
c5896fd76a8eb8b3a0758ea067c23e4034a2bcd4b3f066ffc87934bad6c8c515
-
SHA512
d2398c09dcce0e1b802bb97960cb456cea8ede6438741a2801fea3fa8a85ab2d6500ab14307b0884c9ecd7751df96be114c0038783d2c07428ad5d881e4ef2d5
-
SSDEEP
3072:52RNjdXT10U1EneFrIByAroEI960F9mLuo7Nlald:EXTTPFMYDocMvNAl
Malware Config
Signatures
-
Agenttesla family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1952630x00000000004000000.dmp
Files
-
1952630x00000000004000000.dmp.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 161KB - Virtual size: 161KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ