Behavioral task
behavioral1
Sample
f56b86a7c30c1408d7d632aaed2f0c7c.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
f56b86a7c30c1408d7d632aaed2f0c7c.exe
Resource
win10v2004-20230915-en
General
-
Target
f56b86a7c30c1408d7d632aaed2f0c7c.bin
-
Size
264KB
-
MD5
f56b86a7c30c1408d7d632aaed2f0c7c
-
SHA1
58123a808d1eb186416b15e14f2868cc4cea8721
-
SHA256
6710a0144b628d823ac178bf49ce2df833510632dbd138d8922cc4e9d5f2b54d
-
SHA512
67c328ded77ee72bc93a80deb104ba2654efa97246ad95bae9e8eb36db19d9743efacfe312cf2ec569e6d99812c43c4aac8c07c378a951e4366199fd691927c8
-
SSDEEP
3072:4b3v4nNXS/7BnnZtcNw7MtlN1A/bv3Oag/RHdySMBjX3dF:ignNX8h/cNw7MtlT4b4H9MBR
Malware Config
Signatures
-
Agenttesla family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f56b86a7c30c1408d7d632aaed2f0c7c.bin
Files
-
f56b86a7c30c1408d7d632aaed2f0c7c.bin.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 235KB - Virtual size: 235KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ