Behavioral task
behavioral1
Sample
db18292f88fc78d7d547fc10cde2f2c2.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
db18292f88fc78d7d547fc10cde2f2c2.exe
Resource
win10v2004-20231020-en
General
-
Target
db18292f88fc78d7d547fc10cde2f2c2.bin
-
Size
264KB
-
MD5
db18292f88fc78d7d547fc10cde2f2c2
-
SHA1
24fceef4486254371851b88dab3d5ba79e5f83ee
-
SHA256
8b16a9f3447ef71a08ac45d95225cc51eb051c72c02126261a616b4f7b3603c3
-
SHA512
eb6f453a93873ac56f09cc7a6257cc3a0dff6f684d05859ed2ca7e083348ef29ed9e05acd2f4d461987b7cab6a060923eaaee20f1b5905e2b125dd847283996e
-
SSDEEP
3072:4uBZ9xtpUVpRcMEqG10agGdRDElc7tUdeFzilm5j+bHhpcI:tZ9xtpUVpRFEqGdg6E2RUCiljHXc
Malware Config
Signatures
-
Agenttesla family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource db18292f88fc78d7d547fc10cde2f2c2.bin
Files
-
db18292f88fc78d7d547fc10cde2f2c2.bin.exe windows:4 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 239KB - Virtual size: 238KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ