agenttesla | 1380-64-0x0000000000400000-0x000000000043A000-memory[.]dmp | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1380-64-0x0000000000400000-0x000000000043A000-memory.dmp
Size

232KB
MD5

9fb6970cb10fc92d25a8e752677bab4c
SHA1

57dbda74fe1472878d0885d3145cd8c8ebddff7e
SHA256

cf549d56f49bb2260b319b492a59c783ee06de220d0cf844cd21d6ea07ab8a0c
SHA512

3083ac46c25fc2d2534b7751616e384ac13c0971a716f4fdf90122130936b5fa3c142539c3f2965a62fb41481810bdc6d5f279f2b54d98ad55dc5cc03d0272ff
SSDEEP

6144:xM2uqrmYlAwzTjPUWvPUUqyACXy7eL2j4XseIK9gw5qxVQe:xMMrmYlAwbM8Mqs

Score

10^/10

agenttesla

Malware Config

Signatures

Agenttesla family
agenttesla

Files

1380-64-0x0000000000400000-0x000000000043A000-memory.dmp
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 206KB - Virtual size: 206KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ