Behavioral task
behavioral1
Sample
fd98a35abf31c28796cf32b2cee0e86137efa110270f06d1ff784f9ec768155e.exe
Resource
win7-20240221-en
General
-
Target
fd98a35abf31c28796cf32b2cee0e86137efa110270f06d1ff784f9ec768155e
-
Size
234KB
-
MD5
ba0f8d83321a18cc59db3c008a4d141f
-
SHA1
7ef8a927fd8f819874dbf9e98e6c0e0858dac678
-
SHA256
fd98a35abf31c28796cf32b2cee0e86137efa110270f06d1ff784f9ec768155e
-
SHA512
8f10e074ddc2d069b39eb2519c15601fd51a4213d85a983fa6692427bc795a721c09e4e456e07e7b9d6ef2df2ff60ec8b02b90b8daed83ac150fff9603e3bc1c
-
SSDEEP
3072:DA8vGyuV84ZybZamg6TilnBdkAijd5DrrCHQ:DA8vGyuV84ZybC6GnHkAijHrM
Malware Config
Extracted
agenttesla
Protocol: smtp- Host:
mail.iwglass.net - Port:
587 - Username:
[email protected] - Password:
iwglass@123 - Email To:
[email protected]
Signatures
-
Agenttesla family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fd98a35abf31c28796cf32b2cee0e86137efa110270f06d1ff784f9ec768155e
Files
-
fd98a35abf31c28796cf32b2cee0e86137efa110270f06d1ff784f9ec768155e.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 232KB - Virtual size: 231KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ