agenttesla | 2032-64-0x0000000000400000-0x000000000043C000-memory[.]dmp | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2032-64-0x0000000000400000-0x000000000043C000-memory.dmp
Size

240KB
MD5

a0ebe88d191fe8eb4cd7f0cfddf1d538
SHA1

2c70c297dc9f233f01374f6fb7c3a4eb33c757f4
SHA256

8223e986a7844f6353bbfc74a3f9b66412f65735e74f6a949c6e974c60003430
SHA512

6f89ac0db01e029594cb1121c9f6ff818ccd3546643144317d5ecaca662dbfa6c40374b2f0eb28e9a56240a5e8d8c734074c0e083de5d1e26e8dea02ecbd696e
SSDEEP

3072:KIQ2tK/f+eUWa4lKk5o3sCzTur2jUsCIhYtyE/YVfo0h5pS4Mvc6OB/xgy:KPRWeml+YU1IwxYVth5pS4QZOZxg

Score

10^/10

agenttesla

Malware Config

Signatures

Agenttesla family
agenttesla

Files

2032-64-0x0000000000400000-0x000000000043C000-memory.dmp
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 215KB - Virtual size: 215KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ