Behavioral task
behavioral1
Sample
1356-73-0x0000000000400000-0x0000000000615000-memory.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
1356-73-0x0000000000400000-0x0000000000615000-memory.exe
Resource
win10v2004-20220901-en
General
-
Target
1356-73-0x0000000000400000-0x0000000000615000-memory.dmp
-
Size
2.1MB
-
MD5
5c2d073d00dd37963b2836b1c3177aa1
-
SHA1
6c96c6b3371c5507990e89dad3015c40dcd37bd3
-
SHA256
93f28375584be7c26ecd5ca729348d58cad1d837f9389755429ab4b1aaff4cc5
-
SHA512
c785dd01d2222acf8bf6d8c3db2cf3f0b8030fa31a96df8fab90bf3993ba6b3a949b67f607afeaba547168c2be6622bdde4b50413d55c797d4b2ccb3693c8555
-
SSDEEP
3072:IuQP74l+eB5pHK+RSKfCuY13HSkUsW/4z1cp6YlwrCzl09+MWkk3G/jlF:Idre1LKZ3Ut/2jYy2zle+MW73ijl
Malware Config
Signatures
-
Agenttesla family
Files
-
1356-73-0x0000000000400000-0x0000000000615000-memory.dmp.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 215KB - Virtual size: 215KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ