Behavioral task
behavioral1
Sample
74ae1e30e8c62836e4f07f6b8e2091167e03e0cf57e91268a11a8f8496d7469b.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
74ae1e30e8c62836e4f07f6b8e2091167e03e0cf57e91268a11a8f8496d7469b.exe
Resource
win10v2004-20231020-en
General
-
Target
74ae1e30e8c62836e4f07f6b8e2091167e03e0cf57e91268a11a8f8496d7469b
-
Size
8.3MB
-
MD5
a17a50d5a5895ad9b8abfab318db9cdb
-
SHA1
3f1c4604f5f4dcce1395627fef89676af50e81cc
-
SHA256
74ae1e30e8c62836e4f07f6b8e2091167e03e0cf57e91268a11a8f8496d7469b
-
SHA512
bcc51606ded5662f49dffc63cf2b5a9232c3c75c6e5dba11852325bd04d71f3ddeda61bff17961117e37bcd42e8a450d82641cb918f1f7f34ff365fda488fbf1
-
SSDEEP
24576:Zy4aDXhq4nq4Eq457aPvstdwU1IWe4whq4yhq4IXVKVCKVC2q:YY7Aq76vscU1ItyIo
Malware Config
Signatures
-
Agenttesla family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 74ae1e30e8c62836e4f07f6b8e2091167e03e0cf57e91268a11a8f8496d7469b
Files
-
74ae1e30e8c62836e4f07f6b8e2091167e03e0cf57e91268a11a8f8496d7469b.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ