Static task
static1
Behavioral task
behavioral1
Sample
SecuriteInfo.com.Trojan.Win32.AgentTesla.5984.17961.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
SecuriteInfo.com.Trojan.Win32.AgentTesla.5984.17961.exe
Resource
win10v2004-20240611-en
General
-
Target
SecuriteInfo.com.Trojan.Win32.AgentTesla.5984.17961.exe
-
Size
1.1MB
-
MD5
9ed35e3099df6adb84a68f49ecedbc46
-
SHA1
bd4d88333bb34d0f85741e645ba59b08f00bf3b5
-
SHA256
7eec78094f835c1a432c0253990b7ce5113be31460682975dcfd2497654bf76e
-
SHA512
4a22270aae468148684a5b527bbb3e39f5ce9b04e26091d24ac115fef04960d3a1f5b29c217fb138e0c8b9d0c7bf9b2a83fb4a7da77d9127752a370d970b6db7
-
SSDEEP
24576:xp4XG+c0g0IAtvEqPIsmLeU9vWbLCzb05EfHH:xOG+yB/s2ZWYb0Sn
Malware Config
Signatures
-
AutoIT Executable 1 IoCs
AutoIT scripts compiled to PE executables.
resource yara_rule sample autoit_exe -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource SecuriteInfo.com.Trojan.Win32.AgentTesla.5984.17961.exe
Files
-
SecuriteInfo.com.Trojan.Win32.AgentTesla.5984.17961.exe.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 620KB - Virtual size: 620KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 192KB - Virtual size: 192KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 296KB - Virtual size: 296KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ