| Online Virus Checker | v.1.0.182.174 |
| DB Version: | 2024-07-16 06:00:16 |
AgentTesla is a Remote Access Trojan (RAT) built on the .Net framework, primarily utilized to acquire initial access to systems. It's frequently employed within the framework of Malware-As-A-Service (MaaS). Within this illicit business model, individuals referred to as "initial access brokers" (IAB) offer their specialized expertise to criminal groups seeking to exploit corporate networks. As an initial-stage malware, AgentTesla facilitates remote access to a compromised system, subsequently permitting the downloading of more advanced secondary tools, including ransomware.
| File | NinjaUI-Setup-v2.0 (1).exe |
| Checked | 2024-07-16 03:58:20 |
| MD5 | aaa0815a139a84b11e846705e05bc814 |
| SHA1 | 77d07cc005e031a6782f6ab7d44a30e035f68fe7 |
| SHA256 | 284ff705a6cd2a91a146dc23e70967e12e6ef18a01dd9013cfe05a2b16fbae68 |
| SHA512 | 24d083eadc2036d4419aead6c9fd0cac1ad093a6c587695b681c1c0f9e6de31cf01efc53984aeac04e9e6e137f5b883e085206b4f14e21c5692e07bef138b156 |
| Imphash | 319b1edcc4538be377f43066c635ffef |
| File Size | 1650002 bytes |
Gridinsoft has the capability to identify and eliminate Trojan.Win32.AgentTesla.tr without requiring further user intervention.
 |
d1e8a4ff43bc1c50759bb407af2546a4 95424a30bfea4483cd500cc537f90067 c88682b284cdd9a3 |
| Image Base: | 0x00400000 |
| Entry Point: | 0x00416f40 |
| Compilation: | 2023-10-03 07:51:24 |
| Checksum: | 0x00000000 (Actual: 0x00193ea1) |
| OS Version: | 5.1 |
| PDB Path: | D:\Projects\WinRAR\sfx\build\sfxzip32\Release\sfxzip.pdb |
| PEiD: | PE32 executable (GUI) Intel 80386, for MS Windows |
| Sign: | The PE file does not contain a certificate table. |
| Sections: | 6 |
| Imports: | KERNEL32, OLEAUT32, gdiplus, |
| Exports: | 0 |
| Resources: | 21 |
| Name | Virtual Address | Virtual Size | Raw Size | MD5 | Entropy |
|---|---|---|---|---|---|
| .text | 0x00001000 | 0x00028f0c | 0x00029000 | caca2b2b58a83dbaf15f3f1c6108b427 | 6.69 |
| .rdata | 0x0002a000 | 0x0000a73e | 0x0000a800 | 82c4c666f29d1a9037c062cec3ffdc43 | 5.25 |
| .data | 0x00035000 | 0x00035cb8 | 0x00001000 | e38db51a737a34e70ff98ca4cc764645 | 4.16 |
| .didat | 0x0006b000 | 0x00000178 | 0x00000200 | 36bd41b5d4d3e4514d19a139e6f8cb8f | 3.22 |
| .rsrc | 0x0006c000 | 0x0004598c | 0x00045a00 | d50431ac6e398196be9be8d4d4adbf12 | 5.82 |
| .reloc | 0x000b2000 | 0x00002a70 | 0x00002c00 | ab9c4a66270333af806665da0a975287 | 6.66 |
