agenttesla | 9e4027706ea871d19520759f1dc29b6f15b47f4bc8d98965af68454a22ca563e | Triage

Sharing

General

Target

9e4027706ea871d19520759f1dc29b6f15b47f4bc8d98965af68454a22ca563e
Size

234KB
MD5

5af20a57cdfbbdd0d528045a87306891
SHA1

1e7e9b25098ebffdbee7d87c01f1c1b08a9abedd
SHA256

9e4027706ea871d19520759f1dc29b6f15b47f4bc8d98965af68454a22ca563e
SHA512

1abe00143294e64caf4c44e79932484107d9c1df0119bbbcadaa61ec594f104b04555093f101116207e622dbbc8c576ce3f20ee6d10d5850fa5d237528085458
SSDEEP

3072:benp+iGyuVYE6LbqV1tE7sEhad1GRzK5MXAa4x:benp+iGyuVYE6Lbq5Ecd+zbAv

Score

10^/10

agenttesla

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol: smtp
Host:
mail.iaa-airferight.com
Port:
587
Username:
[email protected]
Password:
webmaster
Email To:
[email protected]

Signatures

Agenttesla family
agenttesla

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9e4027706ea871d19520759f1dc29b6f15b47f4bc8d98965af68454a22ca563e

Files

9e4027706ea871d19520759f1dc29b6f15b47f4bc8d98965af68454a22ca563e
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 232KB - Virtual size: 231KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ