agenttesla | a18e4c437a93ce1bb95de776619c2b8f07c3ce313aa4609e09bfe837258c3664 | Triage

Sharing

General

Target

a18e4c437a93ce1bb95de776619c2b8f07c3ce313aa4609e09bfe837258c3664
Size

234KB
MD5

87a313fb986ffe0c7062cb1ba87eaf41
SHA1

4055457464b9ed40f5e19aa5fbee919bd8295231
SHA256

a18e4c437a93ce1bb95de776619c2b8f07c3ce313aa4609e09bfe837258c3664
SHA512

f64a1e6e1ba28f03af0fe265fd64dcafc4f4b5a5c4ad96caac7ccd39c49e9f1dd586042416039c3abc5b2832a3fbb3c2e7c4f784395dd6492c40a91f241e50ef
SSDEEP

3072:8eNyGC+iClSlSUjbleWls9Yrck/54Z4S45YOnrFoEA:8eNyGC+iClSlSUjbleWlsy/54X+nrOE

Score

10^/10

agenttesla

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol: smtp
Host:
mail.flywingcargo.com
Port:
587
Username:
[email protected]
Password:
8;T*V;3alem?
Email To:
[email protected]

Signatures

Agenttesla family
agenttesla

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a18e4c437a93ce1bb95de776619c2b8f07c3ce313aa4609e09bfe837258c3664

Files

a18e4c437a93ce1bb95de776619c2b8f07c3ce313aa4609e09bfe837258c3664
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 232KB - Virtual size: 231KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ