Behavioral task
behavioral1
Sample
2404780x00000000004000000x0000000000442000memory_JC.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
2404780x00000000004000000x0000000000442000memory_JC.exe
Resource
win10v2004-20230831-en
General
-
Target
2404780x00000000004000000x0000000000442000memory_JC.dmp
-
Size
264KB
-
MD5
28b95ec2b75399dd9559489115e8e4e9
-
SHA1
7a50ccc77c752df42f7c81787e540abbd3fde7cd
-
SHA256
cfe241001b0171e7901f877cc5d2a985f83b75c251fdf79309cc4425671f50fa
-
SHA512
83420e986efb3990a21e8020f42910c84b1c94271dbb1bebeb92cae7c9e10e7501295d06c2d6e8c652dd55d24b94bff48e86bed30aa345b791ad2197bacd2b87
-
SSDEEP
1536:Lsg+4zDc47jn4YlTOZPKGc75qpnrb925v5pC4BEHaix0cY11Zy7yJK9+XYwLCFJ8:LKAFplYNc7wVb8BKx0N1Xy7yE9QgmOv
Malware Config
Signatures
-
Agenttesla family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2404780x00000000004000000x0000000000442000memory_JC.dmp
Files
-
2404780x00000000004000000x0000000000442000memory_JC.dmp.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 234KB - Virtual size: 233KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ