General

  • Target

    2108-132-0x0000000000400000-0x0000000000444000-memory.dmp

  • Size

    272KB

  • MD5

    46643bb7724c43f8a7798829bf704eb2

  • SHA1

    65ee52f4572a1a13aa4c7f1b3d842f2384869e3d

  • SHA256

    58ebed4e13ca0a33a7c053f184b7cbebbe5dd2774e05aa6a04bd88ee21ee18c5

  • SHA512

    4c6b28989415fc20e519a4167f4642aab0244865f99183e7f5d9e838ff37b2cf1805c30c6fa6e1fea4c3e0abb481d55d81e152fcdd05ad8f07341331ab41a6e6

  • SSDEEP

    3072:5BGybM97hOQ/iK2jrOyipY/XbKjv0bbQhMulkm2x68KrtUtCgDeDwKgPS5xcZEcF:iDthOzj8YzKQwh2m4TvRaDLAiZjo

Score
10/10

Malware Config

Signatures

  • Agenttesla family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2108-132-0x0000000000400000-0x0000000000444000-memory.dmp
    .exe windows x86


    Headers

    Sections