Behavioral task
behavioral1
Sample
2024-65-0x0000000000400000-0x000000000043A000-memory.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
2024-65-0x0000000000400000-0x000000000043A000-memory.exe
Resource
win10v2004-20220812-en
General
-
Target
2024-65-0x0000000000400000-0x000000000043A000-memory.dmp
-
Size
232KB
-
MD5
b09910e720a46e92335f206d8f6ee9e5
-
SHA1
0dd620c4f9b02fcee3643c0cc8577c538105428b
-
SHA256
ae1f7df3ec4fa7238b4fbf57e3a0501f5d079d46352854bada9c15d3420139eb
-
SHA512
85b5afda2e9b85c59702e1a24f000a2e7b6955b3c8967ea346621d1bd92dd7e653906d90f446626180e39b7de48db6b59067752eaae685a804e0928f0029c54e
-
SSDEEP
6144:64NIuNBm9dK2xgouyUCNDHbCXy7eL2j4Xs2eLGFNA/Jo+lkke:64NJBm9dK2wEDQNE2
Malware Config
Signatures
-
Agenttesla family
Files
-
2024-65-0x0000000000400000-0x000000000043A000-memory.dmp.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 206KB - Virtual size: 206KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 792B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ