Behavioral task
behavioral1
Sample
786f5490d7af7e8d26256fd79ddd87cf01049494b1e9ca1cf78231c191b5c561.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
786f5490d7af7e8d26256fd79ddd87cf01049494b1e9ca1cf78231c191b5c561.exe
Resource
win10v2004-20240802-en
General
-
Target
786f5490d7af7e8d26256fd79ddd87cf01049494b1e9ca1cf78231c191b5c561.exe
-
Size
256KB
-
MD5
d8394daad14788ec978fc3321356d595
-
SHA1
42fb888ba21b7ee349eddc1f81482786e4f1d047
-
SHA256
786f5490d7af7e8d26256fd79ddd87cf01049494b1e9ca1cf78231c191b5c561
-
SHA512
dbcbb00c519b90c78838f61d42e05dc2a2ae85e03b98abf7763ee8682dff665503cf7938fd66e92c9ecb269fc91663255b7d7b2945e6febe6288f21e6cb17f86
-
SSDEEP
3072:jWkcmieCmREqAbKbRURInSIEMN+7AZvLjYf5FYOE10:ikcmieCmREqAbKbRURbAjjYkOQ
Malware Config
Signatures
-
Agenttesla family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 786f5490d7af7e8d26256fd79ddd87cf01049494b1e9ca1cf78231c191b5c561.exe
Files
-
786f5490d7af7e8d26256fd79ddd87cf01049494b1e9ca1cf78231c191b5c561.exe.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 232KB - Virtual size: 231KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ