Static task
static1
Behavioral task
behavioral1
Sample
HEUR-Trojan.MSIL.Agentb.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
HEUR-Trojan.MSIL.Agentb.exe
Resource
win10v2004-20240226-en
General
-
Target
HEUR-Trojan.MSIL.Agentb.gen-4f9750d7d3aa48be0e2cbe0f5b26cd249b4c8f1df8147829d71171d29e49f876
-
Size
248KB
-
MD5
c7d6d3abf891b8b008fc332e825036ce
-
SHA1
5dc2b8dc20eabe1cfa9fe03312bf9ae025bef1f2
-
SHA256
4f9750d7d3aa48be0e2cbe0f5b26cd249b4c8f1df8147829d71171d29e49f876
-
SHA512
8c32c19fc65f3cf80aa36938cdd3f9b4cbd10291b7b662cc0fa0671a851732974ee98b165f2ada7863f497c67c15ea25abf701e033c6c4c2485727abc4cb23ba
-
SSDEEP
6144:ZR5IuMQoseGk7RZBGxAycKpSPX2VjD13WMq5:b5IuPQh7RZDX2llWMq5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource HEUR-Trojan.MSIL.Agentb.gen-4f9750d7d3aa48be0e2cbe0f5b26cd249b4c8f1df8147829d71171d29e49f876
Files
-
HEUR-Trojan.MSIL.Agentb.gen-4f9750d7d3aa48be0e2cbe0f5b26cd249b4c8f1df8147829d71171d29e49f876.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 214KB - Virtual size: 214KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ