agenttesla | 672-63-0x0000000000400000-0x000000000043C000-memory[.]dmp | Triage

Sharing

Copy URL Twitter E-mail

General

Target

672-63-0x0000000000400000-0x000000000043C000-memory.dmp
Size

240KB
MD5

8e7bbe9d16f8038660f54821cf3228ea
SHA1

7cbd7c967850ecc52c000aa091cf8c5679c70119
SHA256

aacb6ae91f04c03e5c56ddbaa9c908790e03b3cd6592cef0c3f88046f851432f
SHA512

2aaa7d125e537354ce1887096369e3528e0be78e6fc05bf02a985bdddcd699a66ccfcf820fc1ff7ba74509f24ccb189fe31ac69974a6c9f4f21a6acf74be865a
SSDEEP

3072:C6x5ZRRtFyN/6ElcirwV3ApmU/FXUKZx2RD8YwBgVToKd23xwFrvzKT:COZR8/tr2AlUoxWDKgGturrKT

Score

10^/10

agenttesla

Malware Config

Signatures

Agenttesla family
agenttesla

Files

672-63-0x0000000000400000-0x000000000043C000-memory.dmp
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 215KB - Virtual size: 214KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 792B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ