Behavioral task
behavioral1
Sample
f781a28a19ac4e1daff4e5059ff0b4df.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
f781a28a19ac4e1daff4e5059ff0b4df.exe
Resource
win10v2004-20231020-en
General
-
Target
f781a28a19ac4e1daff4e5059ff0b4df.bin
-
Size
264KB
-
MD5
f781a28a19ac4e1daff4e5059ff0b4df
-
SHA1
bcea662aaa49d8759206b7d172c85fa0040da8fc
-
SHA256
1506b82a7faebbea1e3d8aad9ed77129860f0c948baf076feab834dafdf8ecfb
-
SHA512
c361a933156770e60c73c166135bd973e50194a7e81c1344f947c85f4c3d73e8bc0ff71c9d8fc162c3ce7b8b79aa5e1b87ae46f6837dbfcb179fb4ef58b5dda9
-
SSDEEP
3072:fKvTeueuuUM7f6mWqPpev+EWX6uPUyqR6Ui5tib+d2gr9L:fKvTeueuuUM7f6mWupevkX6IfIrb+A
Malware Config
Signatures
-
Agenttesla family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f781a28a19ac4e1daff4e5059ff0b4df.bin
Files
-
f781a28a19ac4e1daff4e5059ff0b4df.bin.exe windows:4 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 235KB - Virtual size: 234KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ