remcos | 2332-359-0x0000000010590000-0x0000000010612000-memory[.]dmp | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2332-359-0x0000000010590000-0x0000000010612000-memory.dmp
Size

520KB
MD5

e043d9e66728a321287f0a8041a08aea
SHA1

189e2cf0e359fc61cb1776ce4441e030ef1735b9
SHA256

d1dd733fd9dcd2a1ef695f503067d6c73754487f1c5f620b2d685f723d26a745
SHA512

3bd03d7abb34fe8263aba5689b19132a3fa63602f72788afab6b6ada2578ae3284bc71f8e11f0063722a6fff9122c115bd0fc4db59026d3135d1d28fdbb26904
SSDEEP

12288:nHNzuFO7V6WBN/kq9KSC6kC044sfZYmN:nxuFu6WB1kDC04DZh

Score

10^/10

remcos

Malware Config

Signatures

Remcos family
remcos

Files

2332-359-0x0000000010590000-0x0000000010612000-memory.dmp
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.text
Size: 469KB - Virtual size: 508KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE