General
-
Target
0cbaf1b35c1bfee6eaf119496de09f17fb89a6fdd850aca894d1bd3e0ebf3753.bin
-
Size
241KB
-
MD5
ff7364fb91eb961f2e3e53d12bcd1e58
-
SHA1
86e18f8a493244cb1bbe04aae77c007bfecd0980
-
SHA256
0cbaf1b35c1bfee6eaf119496de09f17fb89a6fdd850aca894d1bd3e0ebf3753
-
SHA512
c47ac1df0cc5ada0f491011a2d740809c8ee1787c786c458a054b94e4aef5c6bda328c74b2a18fd6d25a4f9016d4ee22a01a50a40dde45ffeca3d7652134d51c
-
SSDEEP
3072:buBZ9xtpUVpRcMEqG10agGdRDElc7tUdeFzilm5j+bHhpcI:sZ9xtpUVpRFEqGdg6E2RUCiljHXc
Malware Config
Extracted
agenttesla
Protocol: smtp- Host:
cp5ua.hyperhost.ua - Port:
587 - Username:
[email protected] - Password:
7213575aceACE@#$ - Email To:
[email protected]
Signatures
-
Agenttesla family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0cbaf1b35c1bfee6eaf119496de09f17fb89a6fdd850aca894d1bd3e0ebf3753.bin
Files
-
0cbaf1b35c1bfee6eaf119496de09f17fb89a6fdd850aca894d1bd3e0ebf3753.bin.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 239KB - Virtual size: 238KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ