_.pdb
Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Behavioral task
behavioral1
Sample
2076-16-0x0000000005940000-0x0000000005996000-memory.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
2076-16-0x0000000005940000-0x0000000005996000-memory.dll
Resource
win10v2004-20240802-en
General
-
Target
2076-16-0x0000000005940000-0x0000000005996000-memory.dmp
-
Size
344KB
-
MD5
6f0aa4a7d3ef73abdde13856302822b1
-
SHA1
2a4ac26e52122bc5cbaf2a15723905ddd9198e69
-
SHA256
18929c2b82f9161888c651a5b2b9e1153ccffdc7f2c9ec2438bd6a4938f40a2c
-
SHA512
f15816c63cb1db6167131b32466ffeb8f4a6192ed3e32d2e95c35cfc1baec6d8ed451f9f69fa4f8c274e69cbb9038527d9bf69c05de90a972f65c69c7e94580e
-
SSDEEP
6144:HTV5d5FNMj0C0ydmJuIi0FDXERHP1X2lVMc4QMp:HTV5d5FSjP0ydVEy1GYQM
Malware Config
Signatures
-
Agenttesla family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2076-16-0x0000000005940000-0x0000000005996000-memory.dmp
Files
-
2076-16-0x0000000005940000-0x0000000005996000-memory.dmp.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
mscoree
_CorDllMain
Sections
.text Size: 314KB - Virtual size: 314KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 644B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ