AteraAgent[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

AteraAgent.exe
Size

105KB
MD5

28d920237f64f246331725c1b2a29d1b
SHA1

6cbbaeab2aaf910f7397771c4e2b5ba7d5719c9f
SHA256

79f6fadf2e77652d0d7fcfe3d82e0f2382dc373db0f2a1d7499d1eec0ba514aa
SHA512

d89dc5c0da0962b43fbbae57d373c543c1023bfdba59721e9de22be6225c6207742c6e80fb737cebc1753c4aec53218a04187f9ff2c78fb5f0c71d7bbfc65f32
SSDEEP

1536:+Tk1M9FgUVRP4ZCebOnhAKmMAhyAc00dX62Cbkmcg3vtTqlsobxF:p6gUXPe0nCKmMAt0dK2CbkKvtTqxF

Score

1^/10

Malware Config

Signatures

Files

AteraAgent.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 102KB - Virtual size: 101KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ