Behavioral task
behavioral1
Sample
2108630x00000000004000000.exe
Resource
win7-20230703-en
Behavioral task
behavioral2
Sample
2108630x00000000004000000.exe
Resource
win10v2004-20230703-en
General
-
Target
2108630x00000000004000000.dmp
-
Size
192KB
-
MD5
f7d998df874ec16719dd69c99464008a
-
SHA1
14232b5142d49d9d57046a38e5f93947674db35c
-
SHA256
0d740eee19928f46dd2a9d5474ea989ec58642fde3029c499a9a47eb322f16d5
-
SHA512
356a8c1494c705850f0fe5b1eecf01f4c958ceebf327f4f6f73cdf262f1580a7b4bd6ee4861f1d7a98dc8f3edcbeed6b1f6c044495082ec34d1def379621658d
-
SSDEEP
3072:FfuWgO6sU1ZWfP5btKGny1Wx8hkqIo0vOmhxyWNVBdJPv+12J:JgO6sU1ZWfP5b3oWxbPzUmS
Malware Config
Signatures
-
Agenttesla family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2108630x00000000004000000.dmp
Files
-
2108630x00000000004000000.dmp.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 163KB - Virtual size: 162KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ