Behavioral task
behavioral1
Sample
1472-63-0x0000000000400000-0x000000000043A000-memory.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
1472-63-0x0000000000400000-0x000000000043A000-memory.exe
Resource
win10v2004-20220812-en
General
-
Target
1472-63-0x0000000000400000-0x000000000043A000-memory.dmp
-
Size
232KB
-
MD5
3c7f61b407f51c7a2d18fc18d10c2a98
-
SHA1
ce41d13bf2fbe2abf39ef4a22adb22d14b191595
-
SHA256
a360d7464cdb327fe5d04f146402450ff2909f083d27ed43da6b5930075fbeb1
-
SHA512
b2922beb7b9abd245ef91e07e27d94d81ae26cac775832cb98c973a26bf5e60aa4834bf9509773f71756fabd643a8317972b43d526d58111967eb33712e9bb86
-
SSDEEP
6144:mIthH57jWZAlRLvtULY9sJYRg1sBKZitQScAIiDf6ie:mIt157FRsH
Malware Config
Signatures
-
Agenttesla family
Files
-
1472-63-0x0000000000400000-0x000000000043A000-memory.dmp.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 207KB - Virtual size: 206KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ