agenttesla | 1092-65-0x0000000000400000-0x0000000000441000-memory[.]dmp | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1092-65-0x0000000000400000-0x0000000000441000-memory.dmp
Size

260KB
MD5

06b69e7ed822931982d3986786fc1283
SHA1

ab06ba641239540f5d1ef717820cfb0467fae7cd
SHA256

f27813baa28c8f65ab09e731ceff5f04b2a8e6dde65307fd6391d96aa4472731
SHA512

739587500acc39c5324403b32b53c75a4b4f47a60e5e9ca27bb8c5ce015ac61399f89a38f5a5fd6ea3dbf2a87dd0fa4c0cbb813ea3b34519be1a028c0d4eaf5e
SSDEEP

3072:dGybM97hOQ/iK2jrOyipV/XbKjv918loEP3Gs+c4jmGA4Ndyk8JdCyDLsqqx/lPp:gDthOzj8VzKWo24bdSJdV/m91eSp

Score

10^/10

agenttesla

Malware Config

Signatures

Agenttesla family
agenttesla

Files

1092-65-0x0000000000400000-0x0000000000441000-memory.dmp
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 49KB - Virtual size: 49KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 166KB - Virtual size: 165KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ