Behavioral task
behavioral1
Sample
f4143e11689597b0adca400f10ade173a9a547c11423b5ceb8992b8f97ac12fc.exe
Resource
win11-20240730-en
General
-
Target
f4143e11689597b0adca400f10ade173a9a547c11423b5ceb8992b8f97ac12fc
-
Size
328KB
-
MD5
fc0504f1b146ab86cd582578ac5c1c05
-
SHA1
0c8fd2d348ac9ed567c28b7f8757ab67bd59aa55
-
SHA256
f4143e11689597b0adca400f10ade173a9a547c11423b5ceb8992b8f97ac12fc
-
SHA512
b27b00ec43a2f7cff8211eb25282a9a0f6e84bb58f7344e166fb94c2fa4a45676a0a47c3e428976f04d190d5a50b584c24a9361360a11310f214f3ea14e440ea
-
SSDEEP
6144:D1UFjS/5wMXuux3py2b9zvnItnUKh2PjIMbM7:6Fu5jXuux3py2lI
Malware Config
Signatures
-
AgentTesla payload 1 IoCs
resource yara_rule sample family_agenttesla -
Agenttesla family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f4143e11689597b0adca400f10ade173a9a547c11423b5ceb8992b8f97ac12fc
Files
-
f4143e11689597b0adca400f10ade173a9a547c11423b5ceb8992b8f97ac12fc.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 326KB - Virtual size: 325KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 880B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ