agenttesla | 2656-11-0x0000000000400000-0x0000000000440000-memory[.]dmp | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2656-11-0x0000000000400000-0x0000000000440000-memory.dmp
Size

256KB
MD5

0d254d1a7d3a017eb0bcaa6ff025b251
SHA1

af4cb0e37b135e1027215da43d438acca2386260
SHA256

eba70be11b3c0aee9b5af7bacb0e8632b4d288849f84ac77f0f9037c00ea31fd
SHA512

f2285194e1014adcee01b9a6daa3b9f8a530dd5e22f1c9d56ee69d391c80b631da5cdbd2945a992adf068e57203e48406aabbcdf5dab64369298b417f8313694
SSDEEP

3072:C+xVZlR8v79i42ybyi/e2I6FtL54pgflu0:C+xVZlR8vJi42ybyq6SSg00

Score

10^/10

agenttesla

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol: smtp
Host:
mail.activasystem.pt
Port:
587
Username:
[email protected]
Password:
Sistema02
Email To:
[email protected]

Signatures

Agenttesla family
agenttesla

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2656-11-0x0000000000400000-0x0000000000440000-memory.dmp

Files

2656-11-0x0000000000400000-0x0000000000440000-memory.dmp
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 232KB - Virtual size: 231KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ