agenttesla | 2948-79-0x0000000000400000-0x0000000000444000-memory[.]dmp

General

Target
2948-79-0x0000000000400000-0x0000000000444000-memory.dmp
Size 272KB
Sample240313-qexjdafc79
SHA256 e534ae77987a438dd99361d5168b18d9d169da094261289455144f11909f961c
MD5 188c6d9e7b47907cbccac6dfc957ed19
SHA1 79f9e7aeaaa785a74b92658ca1ac25d98c9c2c4f
SHA512 9ab07e88ee37457582df71536ab72774bcb74b36d5f0b41544646ef12d70f45836b6c1bd478e2b736276193cfb199e0723f15c4cebdaceb30389d9557f825de1
SSDEEP 6144:1DthOzj81zKQWEudA3oXepEAk7Qybnnk3:1JkgwbA3Pjksybnnk
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

upx agenttesla

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2948-79-0x0000000000400000-0x0000000000444000-memory.dmp

SHA256 e534ae77987a438dd99361d5168b18d9d169da094261289455144f11909f961c
MD5 188c6d9e7b47907cbccac6dfc957ed19
SHA1 79f9e7aeaaa785a74b92658ca1ac25d98c9c2c4f
SHA512 9ab07e88ee37457582df71536ab72774bcb74b36d5f0b41544646ef12d70f45836b6c1bd478e2b736276193cfb199e0723f15c4cebdaceb30389d9557f825de1
SSDEEP 6144:1DthOzj81zKQWEudA3oXepEAk7Qybnnk3:1JkgwbA3Pjksybnnk
MD5 SHA1 SHA512 SSDEEP

UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

272096

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths