Behavioral task
behavioral1
Sample
4988-360-0x0000000010590000-0x000000001060E000-memory.exe
Resource
win7-20220812-en
General
-
Target
4988-360-0x0000000010590000-0x000000001060E000-memory.dmp
-
Size
504KB
-
MD5
1f113e1f50570c51c21be496f3240f60
-
SHA1
99fb92bb99500aa08949edb95db62e31567f6882
-
SHA256
bc542c7b2edf1a1e2f4545f5a65bd7d3354e4b251ef0a08e156b251867ef867c
-
SHA512
8e1eff350ca99f27affabdb5d55c059ef0ece55e361ceabe499aeeb86c4fc0fb5310e55f6fd11765ae988cba09e66d5569cdeb5ca98d7279abb3f6b51aabe81b
-
SSDEEP
6144:hOFBH/FMNjt18F+9a/NgAeDB4CcOtKp03b13a4LJ+sAOZZPWXbTcUGyg:hOFtiNBuFgawDB4NOmuwsfZP1yg
Malware Config
Signatures
-
Remcos family
Files
-
4988-360-0x0000000010590000-0x000000001060E000-memory.dmp.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 465KB - Virtual size: 492KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE