General
-
Target
d9f545ab2a05e99b47dbeda1dcf08f3cdfc607025fece488589b978c659b79b1
-
Size
239KB
-
MD5
a123c12d259d36300aafac1f1127aae5
-
SHA1
a8f978bda9b789b988ef31fbfcb005919fc7b268
-
SHA256
d9f545ab2a05e99b47dbeda1dcf08f3cdfc607025fece488589b978c659b79b1
-
SHA512
fe8cabca2adaf9515ceb4216892131a2903cc01a45da2443917afdd078f3cf41380f9c9317459cf5d062a4aab4ba58316ee21d4db47c402e3215b6634adb5b92
-
SSDEEP
3072:HjuF9N3fwI+V9fAz0YhteF5pfKzLIhiBi:DuF9N3fwVV9fAwYhteVKA
Malware Config
Extracted
agenttesla
Protocol: smtp- Host:
mail.cash4cars.nz - Port:
587 - Username:
[email protected] - Password:
logs2024! - Email To:
[email protected]
Signatures
-
Agenttesla family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d9f545ab2a05e99b47dbeda1dcf08f3cdfc607025fece488589b978c659b79b1
Files
-
d9f545ab2a05e99b47dbeda1dcf08f3cdfc607025fece488589b978c659b79b1.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 236KB - Virtual size: 236KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ