agenttesla | 1168-63-0x0000000000400000-0x000000000043E000-memory[.]dmp | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1168-63-0x0000000000400000-0x000000000043E000-memory.dmp
Size

248KB
MD5

b4f508f08de78e73d5fb872828e73910
SHA1

d3e49e1ec2e32b220576a8156e3e1717ca5e0b9e
SHA256

73a470e2d8766e7c7f23083221b4e059d42c7f7d02083f44172da35f369c3cd9
SHA512

f9caf4ba76638256fa3bac16230c45f087b48dc75cc9976fa416b4b717a4a83da5a83e9cb4b8930b4ea994780200b334e5aa196a5e68254806ea1745f03d1097
SSDEEP

3072:m9rOtnSxw00RKUJDACbYQXrULkxbnxAn0ZS6IoR5RXGg7wgZHmGJMTmiyrr/ZJ:4GsUJ0WUAxnynloR50gDHmZTmTrzZJ

Score

10^/10

agenttesla

Malware Config

Signatures

Agenttesla family
agenttesla

Files

1168-63-0x0000000000400000-0x000000000043E000-memory.dmp
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 216KB - Virtual size: 216KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ