Behavioral task
behavioral1
Sample
1988-65-0x0000000000400000-0x000000000043A000-memory.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
1988-65-0x0000000000400000-0x000000000043A000-memory.exe
Resource
win10v2004-20220812-en
General
-
Target
1988-65-0x0000000000400000-0x000000000043A000-memory.dmp
-
Size
232KB
-
MD5
a1fc1a4447884c07fddb1532b173a906
-
SHA1
205ecbc89198dfe5993aed232a48d7c4b2f336c3
-
SHA256
dbfc00eb87944bc7a4b0e2c54be8325acd3becbb8724bae7ddb9ab6dd7feee80
-
SHA512
8b21b16ec29b7bfaab7ec3cadc334fd77357e0155dca190faa89426e31d2bfb67abf21e7c82a352c7327e854341f25e963f24e827485683d057ee7bd5ae306e4
-
SSDEEP
6144:cIthH5O3hU5ZmoU5RXRsJYRg1sBKZiql3IYLge:cIt15OxEmrXG
Malware Config
Signatures
-
Agenttesla family
Files
-
1988-65-0x0000000000400000-0x000000000043A000-memory.dmp.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 207KB - Virtual size: 206KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ