agenttesla | 664-70-0x0000000000400000-0x0000000000441000-memory[.]dmp | Triage

Sharing

Copy URL Twitter E-mail

General

Target

664-70-0x0000000000400000-0x0000000000441000-memory.dmp
Size

260KB
MD5

e65bd8b182085994bea9160631fe7a80
SHA1

f0c8222be3481c1b1427746dd6dfc3eb39e746cc
SHA256

e776cac691ac22faa7b81c0ec463bc4a8c2d502a2ff3d79659937064016212a6
SHA512

7e5f73fd26a015533a12b8a3f60829058f1310183c6663078c34d2af187cd35a0b09703f950fe2b77a883e0e1dc8a1ccd02f499a0c02d6f7b1a1d3142f4617d8
SSDEEP

3072:HqqaM97eOTPiK3DruiiF/XbKjP418lyiQBWqmj6MILxyq3CIH4KBtDXq5N7B5Cuo:KCteODDmzK9yimMIFh6FksKBMH

Score

10^/10

agenttesla

Malware Config

Signatures

Agenttesla family
agenttesla

Files

664-70-0x0000000000400000-0x0000000000441000-memory.dmp
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 49KB - Virtual size: 49KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 166KB - Virtual size: 166KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ