remcos | 4740-302-0x0000000010590000-0x0000000010612000-memory[.]dmp | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4740-302-0x0000000010590000-0x0000000010612000-memory.dmp
Size

520KB
MD5

912cf63f9f218f6497ec81bfc59299ca
SHA1

39346f92c592714122e0da503222aac9bf68767d
SHA256

4a53f2d6d57ddf8adf7a677ab7aa0ca3f3401bb466e9404689cbd83a27893472
SHA512

aafb9ec7c322a039d13a337063152c026132f009c0afb73b61d33a29df48180b15e4ec2f9433b925502b83b865aab4e9f577c40662226e5e172c33d64147a08c
SSDEEP

12288:zmnk7iLJbpIpiRL6I2WhSKQ9ZsfZQSVn9:hiLJbpI7I2WhQqZ7V9

Score

10^/10

remcos

Malware Config

Signatures

Remcos family
remcos

Files

4740-302-0x0000000010590000-0x0000000010612000-memory.dmp
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.text
Size: 474KB - Virtual size: 508KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE