Behavioral task
behavioral1
Sample
4a062df099f7ebaaca374bd82123589fe40fe77d251f4fa27e2bbff96d915e0a.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
4a062df099f7ebaaca374bd82123589fe40fe77d251f4fa27e2bbff96d915e0a.exe
Resource
win10v2004-20240508-en
General
-
Target
4a062df099f7ebaaca374bd82123589fe40fe77d251f4fa27e2bbff96d915e0a
-
Size
256KB
-
MD5
bda892916dd3ab80fb381a9582242f1d
-
SHA1
cdd7db6cbdeda4aca1f4ff96f4f248ad919c40cc
-
SHA256
4a062df099f7ebaaca374bd82123589fe40fe77d251f4fa27e2bbff96d915e0a
-
SHA512
ee40f3a54d5fcaf5f1c1271147604b7e32f0ebdf447715beef2d39fa0c2f21f85766a651d5b98cce096c768787b857078eef9d6da9d656e0a7ab7d5729c60d6c
-
SSDEEP
3072:yuvGyuynDcybw9Y1UQPVdRSSx5Vg6S1oU:yuvGyuynDcybO2U+VdRSSfSC
Malware Config
Signatures
-
Agenttesla family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 4a062df099f7ebaaca374bd82123589fe40fe77d251f4fa27e2bbff96d915e0a
Files
-
4a062df099f7ebaaca374bd82123589fe40fe77d251f4fa27e2bbff96d915e0a.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 232KB - Virtual size: 231KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ