agenttesla | 1568-62-0x0000000000400000-0x000000000043A000-memory[.]dmp | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1568-62-0x0000000000400000-0x000000000043A000-memory.dmp
Size

232KB
MD5

9053cc6d9bcc02cd8c92a85ebe8a1614
SHA1

5044f1561fd13754900ae0a1440b24aa27049f5e
SHA256

7e904fa52292a77d3af9aff35ce4e10182a3056f9e871767ae5a9fece9ef7163
SHA512

236226fb06c09a3da3ddacdb590856f94515d79f7787ff84a8f664a83b13e3a38a1d836f8fefcf6c7ec8051db373456616f1c88280a1fd90d9fef6689048e5e0
SSDEEP

6144:x/VdHJGh9SVy3j0JXUG05F8CXy7eL2j4XsRG800dBeMfQpe:x/V7Gh9SVyS45q7fQ

Score

10^/10

agenttesla

Malware Config

Signatures

Agenttesla family
agenttesla

Files

1568-62-0x0000000000400000-0x000000000043A000-memory.dmp
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 206KB - Virtual size: 206KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 792B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ