agenttesla | 1020-65-0x0000000000400000-0x000000000043C000-memory[.]dmp | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1020-65-0x0000000000400000-0x000000000043C000-memory.dmp
Size

240KB
MD5

ab586accdc5492b788092287e6d89cd3
SHA1

d6194046b1b764453ab0528a3ac971be583597c3
SHA256

27e7f1c347ca515282a25f5feb91f3dfcfabaae862eb485d0ab0edda3e5bc072
SHA512

162bb11b28b6d65d6f6b24ec682784457faa59336a72812d916ab4ddc4e9ea6eddbcbc5ba604dce2360b4f201ad7e28f6ea9e5cd19bdcab4760d6e2fbd37491d
SSDEEP

6144:0oFrCtFcQYNUFYjENO7IJNeYpb747P0Wwefy:zOtYkm7P0Iy

Score

10^/10

agenttesla

Malware Config

Signatures

Agenttesla family
agenttesla

Files

1020-65-0x0000000000400000-0x000000000043C000-memory.dmp
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 215KB - Virtual size: 215KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ