My Agent.exe_pw_infected.zip
- SHA256 6924383d815bfe0cb308fc62ba0ace8f9eaa5a6cfc67979ead90209d934ab4a4
Password
infected
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
My Agent.exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
8 signatures
150 seconds
General
- Target My Agent.exe_pw_infected.zip
- Size 4.8MB
- Sample261007-3mqr1sys9q
- SHA256 6924383d815bfe0cb308fc62ba0ace8f9eaa5a6cfc67979ead90209d934ab4a4
- MD5 303e25891747fc18303ea47a8ad70bfc
- SHA1 f8b32612aca4313edd0c2c5fea8e566cf7f57c3a
- SHA512 4b8d9b5b077bfcbb75181b02cb3ee300e2daec7577d0467e9cf4a7ea805301e057608dec917215cb137f46477cffc50e12f754954af09adaf01cdfb972e39b87
- SSDEEP 98304:dDkSSxpEZS2oBg/kg5yPN21MAl+OFdTVOpcZJ65z8gxMwt4z+VZFblG:1kNxio1d0Morl1AUJ65QsXt4z+XBlG
- TLSH T1B83633EF075CB6E794A5A411A1C622BF271D534E34A19EE8144C358BCDB7FA33A33186
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/My Agent.exe
File Explorer
-
My Agent.exe_pw_infected.zip.zip 4.8MB
-
My Agent.exe.exe 8.9MB
My Agent.exe
- IMPHASH 83939d7928a3e0390512536ff80992b2
- SHA256 c4d3c8a8b3a0f69a86dfbd2c3ba8c8f431c3b5ec823bd35a1221766e6b2b7b1f
- MD5 5520d461b4f4b2e8916d0e48ff447995
- SHA1 0e55d1dba655759806a14cdf2fa9487ee4e60a60
- SHA512 400b403d251ae4efdbbad936c226a42e69c3590d164c580f583a5a18c47f6587a492db1fabfa6b22f7c7b616982a4f46693604f5c84ad71dcd059c9fd11061fe
- SSDEEP 98304:oaGn4WyCO3HmWOjEUBj+Sddm/B7SHrzwpOulfCfYVC:ogNROwUJm/dGryl6f
- TLSH T18C966B07EDA619E5C5AED2318AB291537F717C891B2023D71B50F6382F7ABD0ADB9310
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
1
Major OS version
6
Entry point
5088
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
PDB paths
kernel32
AddVectoredContinueHandler
AddVectoredExceptionHandler
CloseHandle
CreateDirectoryA
CreateEventA
CreateFileA
CreateIoCompletionPort
CreateThread
CreateWaitableTimerExW
DeleteCriticalSection
DuplicateHandle
EnterCriticalSection
ExitProcess
FreeEnvironmentStringsW
GetConsoleMode
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetEnvironmentStringsW
GetEnvironmentVariableA
GetErrorMode
GetLastError
GetLocalTime
GetProcAddress
GetProcessAffinityMask
GetQueuedCompletionStatusEx
GetStdHandle
GetSystemDirectoryA
GetSystemInfo
GetTempPathA
GetThreadContext
InitializeCriticalSection
IsDBCSLeadByteEx
LeaveCriticalSection
LoadLibraryA
LoadLibraryExW
MultiByteToWideChar
PostQueuedCompletionStatus
QueryPerformanceCounter
RaiseFailFastException
ResumeThread
RtlLookupFunctionEntry
RtlVirtualUnwind
SetConsoleCtrlHandler
SetErrorMode
SetEvent
SetProcessPriorityBoost
SetThreadContext
SetUnhandledExceptionFilter
SetWaitableTimer
Sleep
SuspendThread
SwitchToThread
TlsAlloc
TlsGetValue
VirtualAlloc
VirtualFree
VirtualProtect
VirtualQuery
WaitForMultipleObjects
WaitForSingleObject
WerGetFlags
WerSetFlags
WideCharToMultiByte
WriteConsoleW
WriteFile
__C_specific_handler
msvcrt
___lc_codepage_func
___mb_cur_max_func
__getmainargs
__initenv
__iob_func
__set_app_type
__setusermatherr
_amsg_exit
_cexit
_commode
_errno
_fmode
_initterm
_lock
_onexit
_snprintf
_unlock
abort
calloc
exit
fclose
fopen
fprintf
fputc
free
fwrite
localeconv
malloc
memcpy
memset
signal
strcmp
strerror
strlen
strncmp
vfprintf
wcslen
_cgo_stub_export
Name
.text
Size
3.2MB
Virtual Size
3.2MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
322KB
Virtual Size
322KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
5.2MB
Virtual Size
5.2MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.pdata
Size
81KB
Virtual Size
80KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.xdata
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.bss
Size
Virtual Size
32.3MB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.edata
Size
512B
Virtual Size
77B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.idata
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.CRT
Size
512B
Virtual Size
96B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
512B
Virtual Size
16B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1024B
Virtual Size
808B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
63KB
Virtual Size
63KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ