agenttesla | 1332-63-0x0000000000400000-0x000000000043A000-memory[.]dmp | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1332-63-0x0000000000400000-0x000000000043A000-memory.dmp
Size

232KB
MD5

b5570c366d2ff7c1f1141ecd6ec46a26
SHA1

fa8e3859a067e887f30c03302c0305c0399be86c
SHA256

eb48defe80a395d4aacd2514778040010c972eb3812ab25672d2cba2007daada
SHA512

d136070c40579cfe0891445b069c73f40d1485d97d20886de9a77dd2b754969c411bb57bc2312139bd2627a438431f7483f8a2a5050272bd4823fc2b23d554e9
SSDEEP

6144:OJXgvIZjURr8aiPmmGHiUISTCXy7eL2j4XsfGu7jsLAM9fvbjWIKe:OJGyjURr8bPYXBI

Score

10^/10

agenttesla

Malware Config

Signatures

Agenttesla family
agenttesla

Files

1332-63-0x0000000000400000-0x000000000043A000-memory.dmp
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 206KB - Virtual size: 206KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 792B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ