Behavioral task
behavioral1
Sample
6250a06e583a0941adc2335f54ed5b45464dac6c22022098633b9f85bc469cf9.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
6250a06e583a0941adc2335f54ed5b45464dac6c22022098633b9f85bc469cf9.exe
Resource
win10v2004-20240426-en
General
-
Target
6250a06e583a0941adc2335f54ed5b45464dac6c22022098633b9f85bc469cf9
-
Size
256KB
-
MD5
9f7ba07fbcf445085c38a8ae6f5f431e
-
SHA1
4d8e4927f6634b5b232a87310562d374fe9c5c93
-
SHA256
6250a06e583a0941adc2335f54ed5b45464dac6c22022098633b9f85bc469cf9
-
SHA512
2233c01cf1809225af86c682f107f935bb26a48d049be74a96cefc71c517ef8d7d26dcc4a9d088353c0fe583fa4d9bc00b9c2562391d0c82a2334d6f5b05bb0f
-
SSDEEP
3072:9KwmyuyGsrCzYbCAQvzufMRLnPvcxJ55FkM1ti:9KwmyuyGsrCUbCju0RrPvc1kMz
Malware Config
Signatures
-
Agenttesla family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6250a06e583a0941adc2335f54ed5b45464dac6c22022098633b9f85bc469cf9
Files
-
6250a06e583a0941adc2335f54ed5b45464dac6c22022098633b9f85bc469cf9.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 232KB - Virtual size: 231KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ