Behavioral task
behavioral1
Sample
0277b87fbbf1f74ae94db3072db38be0f0fb602daafb3d4d5df4c5cd6c3d9749.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
0277b87fbbf1f74ae94db3072db38be0f0fb602daafb3d4d5df4c5cd6c3d9749.exe
Resource
win10v2004-20240709-en
General
-
Target
0277b87fbbf1f74ae94db3072db38be0f0fb602daafb3d4d5df4c5cd6c3d9749
-
Size
264KB
-
MD5
0e21ec7da3ae59847891596d7d614438
-
SHA1
662ec5ad15e75a808670ca60ff2ae36ecd46c719
-
SHA256
0277b87fbbf1f74ae94db3072db38be0f0fb602daafb3d4d5df4c5cd6c3d9749
-
SHA512
778bf08d6a6d6b6c41a2508ac9a2151b221f79576374218d7f59ca25de94da5f2f00ea5f1506c22de89cef2ea096922e2ae42e08dad16379cf2fe494130553b8
-
SSDEEP
3072:gNiRNwKmCGKrHPLdRfOgWXRyh0UaUJhAv50K9lOv9bDI:gNFKmCGKrHPLSQhAZ9lW
Malware Config
Signatures
-
Agenttesla family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0277b87fbbf1f74ae94db3072db38be0f0fb602daafb3d4d5df4c5cd6c3d9749
Files
-
0277b87fbbf1f74ae94db3072db38be0f0fb602daafb3d4d5df4c5cd6c3d9749.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 239KB - Virtual size: 238KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ