Behavioral task
behavioral1
Sample
1940-231-0x00000000505A0000-0x00000000505C7000-memory.exe
Resource
win7-20220718-en
General
-
Target
1940-231-0x00000000505A0000-0x00000000505C7000-memory.dmp
-
Size
156KB
-
MD5
0b4aa9ee84acbe36df0dfcc0c061898e
-
SHA1
38ed57362c4f3479a70b45221f5ef3393a112938
-
SHA256
a91f677d3f99a4b0142d526bb62139b076e66d8e1ad1ffd805df21bd9bbfe36e
-
SHA512
37464d729afcc68c6112fdffe6a99d9eede376b636f9fbb549e452cdcf7715135ad2477ea2847e7b43605151349439c03ab8648ba363066ab8facbc782ab4ea7
-
SSDEEP
3072:GhzYTGWVvJ8f2v1TbPzuMsIFSHNThy+JP/P6pr:GhzOv2fM13jsIFSHNT7P/P6J
Malware Config
Signatures
-
Remcos family
Files
-
1940-231-0x00000000505A0000-0x00000000505C7000-memory.dmp.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.text Size: 146KB - Virtual size: 148KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE