C:\Users\huangmoao\Desktop\Winform-Login-UI-Design-main\Login Page Design UI\obj\x64\Release\FlameWooLogin.pdb
Behavioral task
behavioral1
Sample
FlameWooLogin.exe
Resource
win10v2004-20240412-en
Behavioral task
behavioral2
Sample
FlameWooLogin.exe
Resource
win11-20240412-en
General
-
Target
FlameWooLogin.exe
-
Size
16.3MB
-
MD5
26c5dc31373ce9f040a0c1c3a56a5c6a
-
SHA1
4740f9e40245743f22a19abb4f0796b6e333af19
-
SHA256
0398762489b7d24359f0fcaeaf14368f5195cee60664a74053505663ad39e15b
-
SHA512
9453c01faa1542efba4a6438df164a5a63cdd23506b539af90f8c7d1283a32368af6b85abbc39554f4346b3d95b604e9d2987ac7b7865e87c672129e29084708
-
SSDEEP
196608:ryv9oaKckmTjkZ1mvtiBTd7EERjnhVGO0UFlcT5k5GUnqF6IyJXsyKckvK:ryv9uwkgu5lbOOtFl4UnqFIJXsPc
Malware Config
Signatures
-
AgentTesla payload 1 IoCs
resource yara_rule sample family_agenttesla -
Agenttesla family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource FlameWooLogin.exe
Files
-
FlameWooLogin.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Sections
.text Size: 16.0MB - Virtual size: 16.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 250KB - Virtual size: 250KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ