Behavioral task
behavioral1
Sample
976-64-0x0000000000400000-0x000000000043A000-memory.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
976-64-0x0000000000400000-0x000000000043A000-memory.exe
Resource
win10v2004-20220812-en
General
-
Target
976-64-0x0000000000400000-0x000000000043A000-memory.dmp
-
Size
232KB
-
MD5
39cd1e2a8403b492484687eae76118dd
-
SHA1
b6c257bf42ddec25bb9e255e73955ead6ed7b41e
-
SHA256
5db895e71978f6432c9706310c917ca870422715dcb36241e16914a221b817f3
-
SHA512
4e002680cc0645f1862ac53558e454499435b3bf2432d31a3e5b93a8eb3740ee1929b2925030357c39c8c7275b9f9f2d7b0ec7539e70e63e16ee96ff1ad7d9bf
-
SSDEEP
6144:xM2uqrmYlAwzTjPUWvPUUqyACXy7eL2j4XseIK9gw5qxVQe:xMMrmYlAwbM8Mqs
Malware Config
Signatures
-
Agenttesla family
Files
-
976-64-0x0000000000400000-0x000000000043A000-memory.dmp.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 206KB - Virtual size: 206KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ