remcos | 1752-378-0x0000000010590000-0x0000000010613000-memory[.]dmp | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1752-378-0x0000000010590000-0x0000000010613000-memory.dmp
Size

524KB
MD5

2f0e02370958bc311c5ba1a2f51d955a
SHA1

cb26c4d492d00f02463195f13378d9eaf3348e38
SHA256

9e8e497493bd84c2ff7aa8408bab08abbbf2803b16577952e8bf78aeb1734544
SHA512

43a0a3023eaa788e87008661001001326216c873dd20d95f33d530f5c8b03a6a74dc1a2ac5eff09a8bf81ed3890d71436847e8b97bb9fa6f5d71c7c915f7ca7e
SSDEEP

12288:Lmnk7iLJbpIpiRL6I2WhSKQ9ZsfZQS6n9:JiLJbpI7I2WhQqZ769

Score

10^/10

remcos

Malware Config

Signatures

Remcos family
remcos

Files

1752-378-0x0000000010590000-0x0000000010613000-memory.dmp
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.text
Size: 472KB - Virtual size: 512KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE