agenttesla | 1316-63-0x0000000000400000-0x000000000043A000-memory[.]dmp | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1316-63-0x0000000000400000-0x000000000043A000-memory.dmp
Size

232KB
MD5

8a62c9460f93ea6b27363214054b2399
SHA1

cb2dc8c7d0b1e7eb0a0e16af7551813e11474c27
SHA256

9d23f9d06b0534114c7dbb37892ecce03b2f6f184e7f63b0bd47081584da7584
SHA512

65835a4c1a029b00f8567ca3d611f129003ad1da61a63f03b131f6f3747f41fa3c758820cfa8002f333f0945f80b4ef23e52bb0ea04a31616b483fd8b03fcfaf
SSDEEP

6144:0MCJcOhmYlyDRQHqUSqrUio9NCXy7eL2j4Xs2QfmGe:0MCxhmYlyDyr1AOV

Score

10^/10

agenttesla

Malware Config

Signatures

Agenttesla family
agenttesla

Files

1316-63-0x0000000000400000-0x000000000043A000-memory.dmp
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 206KB - Virtual size: 205KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ