agenttesla | 520-70-0x0000000000400000-0x0000000000442000-memory[.]dmp | Triage

Sharing

Copy URL Twitter E-mail

General

Target

520-70-0x0000000000400000-0x0000000000442000-memory.dmp
Size

264KB
MD5

02e3fe8989563f616e8314f389e9cccd
SHA1

e68df01c92683205bc70ab8619de41a335aeee41
SHA256

c944ac2b41d599ddb0ee7c0c3bd262be03a819cf0887f7efd1e0d5af4b6f8f9f
SHA512

87a11cef487e2e7fd1ccc8d52c844d73c928fb675732542198bdcb667d516e35828af28f887cc25858e6d50f8d44072d277fa7dcee40ea25a6595c82a6f247d4
SSDEEP

3072:YqqaM97eOTPiK3DruiiF/XbKjPs18lkv7OU6iHcTn2lkW8dZrj9sV7hvuH6o8h6i:jCteODDmzKpAIWW2lB8LOXvuVjDVKFc

Score

10^/10

agenttesla

Malware Config

Signatures

Agenttesla family
agenttesla

Files

520-70-0x0000000000400000-0x0000000000442000-memory.dmp
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 49KB - Virtual size: 49KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 169KB - Virtual size: 168KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ