Behavioral task
behavioral1
Sample
cyberchef_dump1.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
cyberchef_dump1.exe
Resource
win10v2004-20230915-en
General
-
Target
cyberchef_dump1.bin
-
Size
242KB
-
MD5
644f61b94e50bed2935908f0f1019d04
-
SHA1
b5de512d6f3c135e4e5aa63edaa92154f7dc59b3
-
SHA256
112f00306db8babb1c10980c11bb3324d3a598dd3e4d76b45b48edfbec48854a
-
SHA512
d3b0b5d4bdfbd255371b972bb832055830b25c71ba3b003c96895b9703606b5e636c1faa6d961c82d5251665f2a78b7fdda4b852c884bc1754b4769c3a21e326
-
SSDEEP
3072:ujfdsTjak+0+KB3r/AFU94E5P/rVFZVA:ujdklU63r/AFU9XBd
Malware Config
Extracted
agenttesla
https://discord.com/api/webhooks/1150363626331451392/diQm3_-LAtuDqv52znxS979lWgZku3L6w_1YxVEt-0J336JdLcEM-R02NLCvYjDtnmBt
Signatures
-
Agenttesla family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cyberchef_dump1.bin
Files
-
cyberchef_dump1.bin.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 239KB - Virtual size: 239KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ