Behavioral task
behavioral1
Sample
f7784a581fc1b50a577481ab5bcf277348cf9dcf9368d6c320c20046426c6032.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f7784a581fc1b50a577481ab5bcf277348cf9dcf9368d6c320c20046426c6032.exe
Resource
win10v2004-20240611-en
General
-
Target
f7784a581fc1b50a577481ab5bcf277348cf9dcf9368d6c320c20046426c6032
-
Size
256KB
-
MD5
321a3a782af66b2db6714957a9dd5754
-
SHA1
884dd1a62cf26c2b50bd6fac6d69e57e044a4596
-
SHA256
f7784a581fc1b50a577481ab5bcf277348cf9dcf9368d6c320c20046426c6032
-
SHA512
9a63ca1cdab9ecd8f6a73cfbd913778e98ee0d74716032068010534105dca18f99857ab67a11dffd798cb4ceb056c5940683eaa2af4ffff017b83d5044f4ef45
-
SSDEEP
3072:JI4UoTyp/3RptVTNe0bIOwZiG8BBlG6c5DqXaokIF:JI4UoTyV3RptVT00b2iHDl9vatI
Malware Config
Signatures
-
Agenttesla family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f7784a581fc1b50a577481ab5bcf277348cf9dcf9368d6c320c20046426c6032
Files
-
f7784a581fc1b50a577481ab5bcf277348cf9dcf9368d6c320c20046426c6032.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 232KB - Virtual size: 231KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ