agenttesla | 0x000900000001267a-58[.]dat | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0x000900000001267a-58.dat
Size

207KB
MD5

20ada17bcd3432ca350876228174d2b5
SHA1

66d801c9e0189cd871131152ad2384550304b32a
SHA256

a275687f84247268d022634c71a898d31bf9207588e78901a1a459c6713eb2c7
SHA512

1ff9e874f326112706df55809d59e6f66f9facb73eb08a1ce56c31248940d5e814defb9529b40000f691660f8a65e675febe6f41dd0ff832b12cec2217aabf77
SSDEEP

6144:Hty/f/l06Edxrk1n91S71U4lqR01MdIxsHU/4e8aZQV2Vl:Ht0l06EdxQx7Yw1M

Score

10^/10

agenttesla

Malware Config

Signatures

Agenttesla family
agenttesla

Files

0x000900000001267a-58.dat
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 204KB - Virtual size: 204KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ