Behavioral task
behavioral1
Sample
4c764bc8abc47435be8eb62643b97d6afdc2301982b9d3af354475b19f3ac6ffN.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
4c764bc8abc47435be8eb62643b97d6afdc2301982b9d3af354475b19f3ac6ffN.exe
Resource
win10v2004-20240802-en
General
-
Target
4c764bc8abc47435be8eb62643b97d6afdc2301982b9d3af354475b19f3ac6ffN
-
Size
256KB
-
MD5
b0d5bd54c5cd8274c5c1a0c283a05930
-
SHA1
b160e379e42428d0a36e6450776d449608558ec0
-
SHA256
4c764bc8abc47435be8eb62643b97d6afdc2301982b9d3af354475b19f3ac6ff
-
SHA512
f8c5f9925e63f1b8eb57c856ae6f852a09faf1d101e10682c7e32bed143a62006d271e8b496b02c523ca4b2c3f5f52f754709ce2ac88f721b5f8d9d92c2b042d
-
SSDEEP
3072:2DZmyuyGLY/EsbHKHpBTkPajL5C0IDQq:2DZmyuyGLY/EsbHKJBbjNIU
Malware Config
Signatures
-
Agenttesla family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4c764bc8abc47435be8eb62643b97d6afdc2301982b9d3af354475b19f3ac6ffN
Files
-
4c764bc8abc47435be8eb62643b97d6afdc2301982b9d3af354475b19f3ac6ffN.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 232KB - Virtual size: 231KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ