agenttesla | 764-65-0x0000000000400000-0x000000000044E000-memory[.]dmp | Triage

Sharing

Copy URL Twitter E-mail

General

Target

764-65-0x0000000000400000-0x000000000044E000-memory.dmp
Size

312KB
MD5

a6e4afbdb6c68b53825168820c7398de
SHA1

6f9e3253462cf4af628e07f4f8fe2110c56e2efa
SHA256

3f52b4e7ae7c2449b296af8e6423a0820e65b7804f8304ee5518c2babd5e950b
SHA512

fa33641799b821372ce67727cf9de002514731677fa2e0fafb44896850220da635b929e5ade0ec5ae57178e271d43e227c28a76d9098cfd161fa5ac13b6679cb
SSDEEP

6144:yCteODDUzKBSryCB2GFfXUI/N5y3noRIM16Zt3jI/QXKrgWT:ye3cxhVFfb3IMA16QKT

Score

10^/10

agenttesla

Malware Config

Signatures

Agenttesla family
agenttesla

Files

764-65-0x0000000000400000-0x000000000044E000-memory.dmp
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 49KB - Virtual size: 49KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 218KB - Virtual size: 218KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ