agenttesla | 704-157-0x0000000000400000-0x000000000062B000-memory[.]dmp | Triage

Sharing

Copy URL Twitter E-mail

General

Target

704-157-0x0000000000400000-0x000000000062B000-memory.dmp
Size

2.2MB
MD5

4a3c474683608b2ebbedaa2aff33aff6
SHA1

23c89aa8a525c473bf1f34556c4d472a71bea3c9
SHA256

c6b9f8350c6bb2cfd5432db0ed9dda68b6df8484483b4b7d77d8f5aeb1dde98d
SHA512

f0dfddca42e09c335bee5df73a3e6ee2369e16cc6090bff425573c0a8c6da25ad47f5a3e3b13efa9b3c13b9b2bd4c1d35203958f076716d3306729f856b3f5cb
SSDEEP

3072:wi95lifginA88Ug2v8gutOnXyDO2BUK98r/ecpc/uKVFGvHNTk5TIFlGmRFrDz4d:wc6XnDWxtUXrvcPV8fNI50GmTr/4L

Score

10^/10

agenttesla

Malware Config

Signatures

Agenttesla family
agenttesla

Files

704-157-0x0000000000400000-0x000000000062B000-memory.dmp
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 215KB - Virtual size: 214KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 792B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ