C:\Users\Banana on top\Desktop\AgentTesla-master\AgentTesla\obj\Release\net40\agentTesla.pdb
Static task
static1
Behavioral task
behavioral1
Sample
agentTesla.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
agentTesla.exe
Resource
win10v2004-20240508-en
General
-
Target
agentTesla.exe
-
Size
168KB
-
MD5
7fc94424d9a3c8a0c2f60149eca9a563
-
SHA1
8a3dcc4f2e37ebdd49b1df1a2da50a528e18ac0d
-
SHA256
dbc67953c460a609aa15c5a9a825b9e7e7bb4fd13b4537fa1327111330a4c5ff
-
SHA512
cb431689a4f2c8db8a2ad938126c46964bb2ae347f916408eee0d247c73b38e8f0de0ab40b284c8f62894f2fd4744460f9cb9316640be94dfa12e65ffa68a889
-
SSDEEP
3072:JfYBNjo5K9bblrSrGjtvu6r5+c3DwiRjEibM0mEsQG11vI4AuF0ULFd60Y5xNQkh:2LlmGjtvu6r0c3DwiRgibXc9U
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource agentTesla.exe
Files
-
agentTesla.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Sections
.text Size: 166KB - Virtual size: 166KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ