General

  • Target

    924-61-0x0000000000400000-0x0000000000480000-memory.dmp

  • Size

    512KB

  • MD5

    e9d49b4a654be30910afdec6f10369da

  • SHA1

    f4a7387f92273440b613d34d43af555b63904c07

  • SHA256

    877abecab9d6b6075fabd27652d62af9c1cef652a5aa4bd2ec0fac9fa06156ff

  • SHA512

    03697f0574c7e88809c48312bd0676ddc745ee7b9622e7a5c942fb730f1647544e8599292630c2f406e66c6a6fedf5cbb1dd3ee2901365b5d2d3d294b533bb05

  • SSDEEP

    6144:6XVUvr+eNVx6JuGD5To83sRnymABKtqulRwOJfZJEfcZdC48hAiWsAOZZ8RX7mc:6X8/Vx65HCnDAByqulR1fZJQGs/Z8

Score
10/10

Malware Config

Signatures

  • Remcos family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 924-61-0x0000000000400000-0x0000000000480000-memory.dmp
    .exe windows x86


    Headers

    Sections