Behavioral task
behavioral1
Sample
c53629d9c97fff802ece1bf374a927db4ac8b40aab7c73c7ae79fb2ebefedf41.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c53629d9c97fff802ece1bf374a927db4ac8b40aab7c73c7ae79fb2ebefedf41.exe
Resource
win10v2004-20240508-en
General
-
Target
c53629d9c97fff802ece1bf374a927db4ac8b40aab7c73c7ae79fb2ebefedf41
-
Size
264KB
-
MD5
b9069f95dd67c09a9aaa0a33ab90be6c
-
SHA1
957a5652f6bbedc3b7590a0569c8357923767287
-
SHA256
c53629d9c97fff802ece1bf374a927db4ac8b40aab7c73c7ae79fb2ebefedf41
-
SHA512
fa5b251c8a83e7ad19b03927c7b90369e23240305fd1a0b3b698c7b06a542e48281665aa1a3357fc239b8d455f78b504f7428ad80ec787e5c3c9b07900e538dc
-
SSDEEP
3072:+khFiylYKmiyz/lUHFRfu7fTJ3bKlnoWju58D/xHcKl0:+QiylYKmiyz/lkSZbWoWjZ/5
Malware Config
Signatures
-
Agenttesla family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource c53629d9c97fff802ece1bf374a927db4ac8b40aab7c73c7ae79fb2ebefedf41
Files
-
c53629d9c97fff802ece1bf374a927db4ac8b40aab7c73c7ae79fb2ebefedf41.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 239KB - Virtual size: 238KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ