C:\Users\DarkByte\Desktop\Tools\2024.8.4\NBA2K24\Winform-Login-UI-Design-main\Login Page Design UI\obj\x64\Release\FlameWooLogin.pdb
Behavioral task
behavioral1
Sample
fce13b039c9ad4d7f66e37ccf52e14e1e2182dc1c50a334174139abe13af9f1e.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fce13b039c9ad4d7f66e37ccf52e14e1e2182dc1c50a334174139abe13af9f1e.exe
Resource
win10v2004-20240910-en
General
-
Target
fce13b039c9ad4d7f66e37ccf52e14e1e2182dc1c50a334174139abe13af9f1e
-
Size
16.0MB
-
MD5
abb2a74bc47c2cbf8581064f12dfe894
-
SHA1
b029052e33cdab649ce31538732074a7fa828a8a
-
SHA256
fce13b039c9ad4d7f66e37ccf52e14e1e2182dc1c50a334174139abe13af9f1e
-
SHA512
1ac1b6e9a0eed7a17d7c62f32b52f83c085e2b5865259326ad59ac04413e1669528f56f6878753a8a8f34d1166d131b9f48f82172b50278820913463a2b8e34e
-
SSDEEP
393216:2Dv9uwkgu5lva7OOtFl4UnqFIJXsPpay:M9xkZMl4i8
Malware Config
Signatures
-
AgentTesla payload 1 IoCs
resource yara_rule sample family_agenttesla -
Agenttesla family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fce13b039c9ad4d7f66e37ccf52e14e1e2182dc1c50a334174139abe13af9f1e
Files
-
fce13b039c9ad4d7f66e37ccf52e14e1e2182dc1c50a334174139abe13af9f1e.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Sections
.text Size: 15.8MB - Virtual size: 15.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 250KB - Virtual size: 250KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ