agenttesla | 1788-67-0x0000000000400000-0x000000000043A000-memory[.]dmp | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1788-67-0x0000000000400000-0x000000000043A000-memory.dmp
Size

232KB
MD5

f5acb61c0560da00b972cb4506063e5f
SHA1

605018b6af266d24c9c664c2069cfdc02339008d
SHA256

02fcc8643ee55c1f191cee6439617304b8f6210b1b51fb29cf3ebcb7418be870
SHA512

49bebe01aea5190227d1c5d2a45ee0f9a9250abceb33737d874a0bcb37e13b23051191e952c2be3f878aa52084cefdc980d39f25cbe66cd427e72306bbeade07
SSDEEP

6144:ECPYibFES25MVrIUvYUy5ECXy7eL2j4XspUx68P4oe:ECjbFES25alvf

Score

10^/10

agenttesla

Malware Config

Signatures

Agenttesla family
agenttesla

Files

1788-67-0x0000000000400000-0x000000000043A000-memory.dmp
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 206KB - Virtual size: 206KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ