Behavioral task
behavioral1
Sample
1268-66-0x0000000000400000-0x000000000044E000-memory.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
1268-66-0x0000000000400000-0x000000000044E000-memory.exe
Resource
win10v2004-20220812-en
General
-
Target
1268-66-0x0000000000400000-0x000000000044E000-memory.dmp
-
Size
312KB
-
MD5
2358ecca1be82a0bbc794fbfa362088e
-
SHA1
fcc99e21ebddc2a690b34c67a4d21bc2d8e5e502
-
SHA256
4a7bc8bcbdbfae73d46fcd6295eeed5aebb86987bf823e147e12c80307cd5820
-
SHA512
f8b39c25f35b5a23ad5bd9274783150df14c45ececbe98ad6c0543efb4ce2fc7f1517515d4811aedc30e369a3134e6b3373a4eacbcac65b571bbabbf4e30ebe6
-
SSDEEP
6144:0CteODDXzKV642GnVkjUP7o2oGb2G7MSwmroIg:0e3P9NuN8Gg
Malware Config
Signatures
-
Agenttesla family
Files
-
1268-66-0x0000000000400000-0x000000000044E000-memory.dmp.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 49KB - Virtual size: 49KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 217KB - Virtual size: 217KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ