Behavioral task
behavioral1
Sample
117bba406d74d5190714097ceca5b4925c034666a33cbab77358fa0d7f56a5d5.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
117bba406d74d5190714097ceca5b4925c034666a33cbab77358fa0d7f56a5d5.exe
Resource
win10v2004-20240802-en
General
-
Target
117bba406d74d5190714097ceca5b4925c034666a33cbab77358fa0d7f56a5d5
-
Size
264KB
-
MD5
2c485f123a6ab85f28087f51d0517629
-
SHA1
72fbacd252c051da21e63d690ceaf2ad99deaddc
-
SHA256
117bba406d74d5190714097ceca5b4925c034666a33cbab77358fa0d7f56a5d5
-
SHA512
82415e20a7fc901755d358ad9c1c3e9fe54cba832e9e915f6f4e15d4cbed244004e131c3c38bd91b77a8d0425e1513647aa87b7d581fee38adcc1552bff4a48c
-
SSDEEP
3072:fdHBqN7pllFT7LTjUGuZbHhjQOxZrfeMMzY7+5UUzg3Zl:BBqN7pllFT7LTjUGy/xZTeMb7wgJ
Malware Config
Signatures
-
Agenttesla family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 117bba406d74d5190714097ceca5b4925c034666a33cbab77358fa0d7f56a5d5
Files
-
117bba406d74d5190714097ceca5b4925c034666a33cbab77358fa0d7f56a5d5.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 233KB - Virtual size: 233KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ