Behavioral task
behavioral1
Sample
888-67-0x0000000000400000-0x000000000043A000-memory.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
888-67-0x0000000000400000-0x000000000043A000-memory.exe
Resource
win10v2004-20220812-en
General
-
Target
888-67-0x0000000000400000-0x000000000043A000-memory.dmp
-
Size
232KB
-
MD5
ef218605aa4619bf2d8e9863ba3b30e1
-
SHA1
fdf8b010abb69925ac2e4f977bcc5abdafcf27bd
-
SHA256
3b5d1dfdc0f0c985359afab2e1b03aef43d3c033a24e7006f4ffa02f98e277d5
-
SHA512
d21903f2ffd5c64d3da520923ac64401dd5d1b79822b8925dfd3f5ccf3ca3cf464c08de4ecb77f3d434220cdf2725c0134efc2d3e8cbccce4165b7e86868efe3
-
SSDEEP
6144:AMWHlebFES2+ka4c1thUmuR01MdIxsHU/p3RnxdY9VBYe:AMgebFES2hFQtv6HB
Malware Config
Signatures
-
Agenttesla family
Files
-
888-67-0x0000000000400000-0x000000000043A000-memory.dmp.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 206KB - Virtual size: 206KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ