Behavioral task
behavioral1
Sample
b951536584cc016a4ba51725c83f2998b186005fd2e4e710aa6709f5aac74a99_JC.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
b951536584cc016a4ba51725c83f2998b186005fd2e4e710aa6709f5aac74a99_JC.exe
Resource
win10v2004-20230915-en
General
-
Target
b951536584cc016a4ba51725c83f2998b186005fd2e4e710aa6709f5aac74a99_JC.exe
-
Size
242KB
-
MD5
46515ad3f9e77125300a91b491461b5a
-
SHA1
7ab51b33010968d4979e62d7ad3823969afe1a3a
-
SHA256
b951536584cc016a4ba51725c83f2998b186005fd2e4e710aa6709f5aac74a99
-
SHA512
ba424a0d4d058d0f4e19e60de596344b156fe72e598cd21158534f669256983423e4f44e0da49495ca8ccc4815796cf2a779182cd910cdd97047af61532f834e
-
SSDEEP
3072:zMaTSjKGwrb8XsjGXldz9eBwbqczqGMaehUV:waT/vrb8XsqldYMqkqy
Malware Config
Extracted
agenttesla
https://discord.com/api/webhooks/1151743910964625489/OTxrHUj4z0z7EdvsMCv8cUVw4Pj5qv9XnrWLQe0n6Z23jJyViEsxW5Q4xb6c-PRpBi8w
Signatures
-
Agenttesla family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b951536584cc016a4ba51725c83f2998b186005fd2e4e710aa6709f5aac74a99_JC.exe
Files
-
b951536584cc016a4ba51725c83f2998b186005fd2e4e710aa6709f5aac74a99_JC.exe.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 239KB - Virtual size: 239KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ