agenttesla | 1380-66-0x00000000003C0000-0x00000000003FC000-memory[.]dmp | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1380-66-0x00000000003C0000-0x00000000003FC000-memory.dmp
Size

240KB
MD5

7615b2aa7d4cf2d2fbaf757f61872964
SHA1

68c4bfa4bdf60409036d1b0b01ec568913d76373
SHA256

b3c44a227e846fc334c0c5e0f613e2bef98ae623733cb683503fe350a1a78ef0
SHA512

f3adff4507500f54111e67fa1bb26ca05e888dff2799e38d1a168a35e9fef46992ebb769515bfbaebf38d01caa293326bebe7d804778f5717d0bf61f475aa74e
SSDEEP

6144:ifHedWZeUVUY7OlHace9PBxjhV5D7wgqs:6PZhlV5Us

Score

10^/10

agenttesla

Malware Config

Signatures

Agenttesla family
agenttesla

Files

1380-66-0x00000000003C0000-0x00000000003FC000-memory.dmp
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 215KB - Virtual size: 215KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ