Behavioral task
behavioral1
Sample
845eb7d6f0bbaa4039a6eef8fcabab25f02664934976d383ec22fe816d39d8de.exe
Resource
win7-20240221-en
General
-
Target
845eb7d6f0bbaa4039a6eef8fcabab25f02664934976d383ec22fe816d39d8de
-
Size
277KB
-
MD5
fde63577dc4e9e9f7879856efd7c47f2
-
SHA1
475dd39e8ae51a125eff89d940ec831405d72226
-
SHA256
845eb7d6f0bbaa4039a6eef8fcabab25f02664934976d383ec22fe816d39d8de
-
SHA512
2be0ce72c10e28abfcafe129ee3374fdaafa9967fa39840a0a7b5cf2315503c980fc452feefc8eaa7c720c9a329d337e10a162d44e5b73322efd5e68078c9f69
-
SSDEEP
6144:V/37IOU9CztY2tBKRIH/guzuzlo9um0BS/2egTQnY14coU7Q2+LDHebbJ+:lJU9CVBqcgUaor0ByIYaQ2
Malware Config
Signatures
-
AgentTesla payload 1 IoCs
resource yara_rule sample family_agenttesla -
Agenttesla family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 845eb7d6f0bbaa4039a6eef8fcabab25f02664934976d383ec22fe816d39d8de
Files
-
845eb7d6f0bbaa4039a6eef8fcabab25f02664934976d383ec22fe816d39d8de.exe windows:4 windows x86 arch:x86
476f92c8f9ddbcb805cdc5c61fbc5635
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ntdll
NtContinue
Sections
Size: 275KB - Virtual size: 274KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Size: 1024B - Virtual size: 880B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ