Behavioral task
behavioral1
Sample
2592140x00000000004000000x0000000000442000memory_JC.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
2592140x00000000004000000x0000000000442000memory_JC.exe
Resource
win10v2004-20230831-en
General
-
Target
2592140x00000000004000000x0000000000442000memory_JC.dmp
-
Size
264KB
-
MD5
b52e2eadc6e0f3bd77d440a0b1c283d9
-
SHA1
4b3a3ecdf00e273d3a9e01475d529bc8d6b6334b
-
SHA256
86037d51ae0003665e0d1e117c819d730d0c45270e472311ec55efe3dbbf5419
-
SHA512
614a0fb4aa4e22277e895e48d03a81194ba2064af31a8112289c2a4b8315ae753a5454833d41436152c045668e0d922f1e3fe4f66f6bf5bcd3a2f5c5f4f98767
-
SSDEEP
3072:Jr4wpKhT73CqzJugI9wQimE4lBtUeq2sxv:9fpETTCqzJu5aQimTBl
Malware Config
Signatures
-
Agenttesla family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2592140x00000000004000000x0000000000442000memory_JC.dmp
Files
-
2592140x00000000004000000x0000000000442000memory_JC.dmp.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 239KB - Virtual size: 239KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ