agenttesla | 1380-69-0x0000000000400000-0x0000000000441000-memory[.]dmp | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1380-69-0x0000000000400000-0x0000000000441000-memory.dmp
Size

260KB
MD5

d738cad774c628d9e2d0ac913413db88
SHA1

d51a3bce202f9c66bf3ab128cfd7eec61ac69ce5
SHA256

3e619070fea5a204bc927037fa151facc78512b6041284decd879d2533fbc68c
SHA512

366709040d608b84d3194da435a15ada2b5b61b04bedc7e800ddc63667e4fca3e18f96527e3ef78565d4aa4f1e4c3e1bc8dfb6572c844abcd0617cb74830b773
SSDEEP

3072:pqqaM97eOTPiK3DruiiF/XbKjPE18l6EUCdyu0ja1h1k+HQ4wqaysMcAhmtUKZtQ:oCteODDmzKR6pUwetHQia2mF1hXVDd

Score

10^/10

agenttesla

Malware Config

Signatures

Agenttesla family
agenttesla

Files

1380-69-0x0000000000400000-0x0000000000441000-memory.dmp
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 49KB - Virtual size: 49KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 165KB - Virtual size: 164KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ