Behavioral task
behavioral1
Sample
276ba09c917afbe447afef092092a8e2e3cd450ae6543c2f5b5fa70e5fbb0674.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
276ba09c917afbe447afef092092a8e2e3cd450ae6543c2f5b5fa70e5fbb0674.exe
Resource
win10v2004-20240802-en
General
-
Target
276ba09c917afbe447afef092092a8e2e3cd450ae6543c2f5b5fa70e5fbb0674
-
Size
264KB
-
MD5
96d536e0d31953df566b564f7724049c
-
SHA1
83cc993ececc026df941fe08231521e1792df92b
-
SHA256
276ba09c917afbe447afef092092a8e2e3cd450ae6543c2f5b5fa70e5fbb0674
-
SHA512
0b6c5d1ea320edfdf0389f528ccb69d59424516b7a968636ad084516a90e7b888cda0ad86434ac65a0e2be8948644fa7d7201a0565cdb26c9fb9a5bc1cee1e5b
-
SSDEEP
3072:UWsyGC+iLHmqHbcCnyzYR+ijoaI5NwZX0P:UWsyGC+iLHm6bcCnqvijoadZE
Malware Config
Signatures
-
Agenttesla family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 276ba09c917afbe447afef092092a8e2e3cd450ae6543c2f5b5fa70e5fbb0674
Files
-
276ba09c917afbe447afef092092a8e2e3cd450ae6543c2f5b5fa70e5fbb0674.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 232KB - Virtual size: 232KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ