Behavioral task
behavioral1
Sample
a77123bc0f8a2c98c4dc786c15ba6ad3f3e6b1b316ac7ab80ed67158eb058b73.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
a77123bc0f8a2c98c4dc786c15ba6ad3f3e6b1b316ac7ab80ed67158eb058b73.exe
Resource
win10v2004-20240226-en
General
-
Target
a77123bc0f8a2c98c4dc786c15ba6ad3f3e6b1b316ac7ab80ed67158eb058b73
-
Size
264KB
-
MD5
63ef0c3f149ea936b9199b1569e480f3
-
SHA1
ea0755e089326d420a0c99cf26c3bea9d300fd8c
-
SHA256
a77123bc0f8a2c98c4dc786c15ba6ad3f3e6b1b316ac7ab80ed67158eb058b73
-
SHA512
7a2ddce7123ddb9d157f4c5e547e615118b7e89fee4d45f6a6c7c6118300720c9bfacb62e995adf8d08b4a5f945436c695b5a1428bc7936045706094b34df83f
-
SSDEEP
3072:QS6yayKFhMvis4Kj62BIoR0Ea5t9H5aabLEJUb:QS6yayKF+vTDfIoR0Ea5t9E8LM
Malware Config
Signatures
-
Agenttesla family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a77123bc0f8a2c98c4dc786c15ba6ad3f3e6b1b316ac7ab80ed67158eb058b73
Files
-
a77123bc0f8a2c98c4dc786c15ba6ad3f3e6b1b316ac7ab80ed67158eb058b73.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 234KB - Virtual size: 234KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ