Behavioral task
behavioral1
Sample
2660120x00000000004000000x0000000000442000memorydmp_JC.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
2660120x00000000004000000x0000000000442000memorydmp_JC.exe
Resource
win10v2004-20230915-en
General
-
Target
2660120x00000000004000000x0000000000442000memorydmp_JC.exe
-
Size
264KB
-
MD5
d4652bbb4f7fe666c5a8b23234109c3c
-
SHA1
0d232585ee80bdbc9041cc52751aba688a4372e5
-
SHA256
719fbf2d88f1f31b3331c0298efa032b03c0a2e9236aee5c36ece01e36e0c697
-
SHA512
e1b4eb387bf65acf4f320d9af7e1299585333263223e573f92afec9bc99036cd7a42f2cd13f68402b170b2ae51663b61de5e6d2de992453cad1258b027351417
-
SSDEEP
3072:/rE1JLOwIAye0m4zWCBk8EGsuvWVEZO6PrQ/AU05B:/rEDnIAp0m4zW5qZFZzT35
Malware Config
Signatures
-
Agenttesla family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2660120x00000000004000000x0000000000442000memorydmp_JC.exe
Files
-
2660120x00000000004000000x0000000000442000memorydmp_JC.exe.exe windows:4 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 239KB - Virtual size: 239KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ