General

  • Target

    1232-84-0x0000000010590000-0x0000000010672000-memory.dmp

  • Size

    904KB

  • MD5

    06ff12eabb6e2da6c3374e55e704b41d

  • SHA1

    4b01359879faa3a55abb8b5ececc8164bc498690

  • SHA256

    7569ff0238b1c244e8c525fcb62f58e4a7237a7f039cd7f1f579f2bf00de931f

  • SHA512

    176170474bb791e9eec41697d0dd886c7615ad27ef0c655bd26c12e92c9d3a8fdeb2e4b0ccae4b6350d031c95d3589bd73dc2e3196152464e742fb0932619e1d

  • SSDEEP

    6144:1XVUvr+eNVx6JuGD5To83sRnymABKtqulRwOJfZJEfcZdC48hAiWsAOZZ8RX7mck:1X8/Vx65HCnDAByqulR1fZJQGs/Z8

Score
10/10

Malware Config

Signatures

  • Remcos family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1232-84-0x0000000010590000-0x0000000010672000-memory.dmp
    .exe windows x86


    Headers

    Sections