General

  • Target

    2812-68-0x0000000000400000-0x0000000000489000-memory.dmp

  • Size

    548KB

  • MD5

    f8b76817c4a6eb37d219f3b05f5d7ada

  • SHA1

    af636f7aa82a4a082d00f4f559ca91a2fb237073

  • SHA256

    676def2423db7600d10423036c99a358b576f91bacb65ea7bfb2a0f99a1e55cc

  • SHA512

    abb1566526ee33363937c892fe92b8abe7ea227426c0809737b2cd47143da95226ffcd72b15e58a4d6d48d14d56dcda169365f426473b94764b39a38a980443a

  • SSDEEP

    12288:1tRXxReZj3WZfj/2eSseWFaIe2+f8CL4hs/ZfL:1tx7cyF2eSsewS8W4gZT

Score
10/10

Malware Config

Signatures

  • Remcos family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2812-68-0x0000000000400000-0x0000000000489000-memory.dmp
    .exe windows x86


    Headers

    Sections