Behavioral task
behavioral1
Sample
1984-65-0x0000000000400000-0x0000000000441000-memory.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
1984-65-0x0000000000400000-0x0000000000441000-memory.exe
Resource
win10v2004-20230220-en
General
-
Target
1984-65-0x0000000000400000-0x0000000000441000-memory.dmp
-
Size
260KB
-
MD5
97ef7be8870400eb9f64c425deb49adc
-
SHA1
250e23231955ecc98cc5aa2d37b974edef2d04e4
-
SHA256
d860a316aeff1515a874f142bad15194010ca8ed6e5e7a6862e748cc1484681a
-
SHA512
b34b8b09b5dfd539ba84b8b15c0a7a9fc9bc5f4acf40804716c5fb25a7efc9b4977bfc311a03fabceee2b1cce9d11a4e89280f7d76975aaa4b985dbe2590f850
-
SSDEEP
3072:yGybM97hOQ/iK2jrOyipV/XbKjvF18lfBAokRh31EoqTel33Vz405lpKBeVSJLj7:3DthOzj8VzK+2ZEoqahh405GOSRj
Malware Config
Signatures
-
Agenttesla family
Files
-
1984-65-0x0000000000400000-0x0000000000441000-memory.dmp.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 49KB - Virtual size: 49KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 165KB - Virtual size: 164KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ