Behavioral task
behavioral1
Sample
1908-62-0x0000000000400000-0x000000000043A000-memory.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
1908-62-0x0000000000400000-0x000000000043A000-memory.exe
Resource
win10v2004-20220812-en
General
-
Target
1908-62-0x0000000000400000-0x000000000043A000-memory.dmp
-
Size
232KB
-
MD5
2a4bbdf49adf6c86438f466710f4874d
-
SHA1
35f3614f24bf8bd13775be04f91f40cb70acbaec
-
SHA256
1781b4d1fc7317f7bc00dc759511b9aa815003e08805c8d9c8f0531ab33e3c62
-
SHA512
bcf6148b17c5661a70d1e9fac8e0c571f4db3edac675dad379231ae4dc13613a362ada52f6b5ddaa742a6374660adbc38fc0cd376a5c8769e83ad0a33ade952b
-
SSDEEP
6144:HXxjmKk7YVPYoDMC1RMcuU0IjS/qj+T+jo/8+0y1UTVzzar:AKkUpLMCx+oz
Malware Config
Signatures
-
Agenttesla family
Files
-
1908-62-0x0000000000400000-0x000000000043A000-memory.dmp.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 207KB - Virtual size: 206KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ