General

  • Target

    1728-12-0x0000000000400000-0x000000000041D000-memory.dmp

  • Size

    116KB

  • MD5

    92552708190dbe197d37733f684abf03

  • SHA1

    f0cc3a254a3fc4b5a46607769faacaec67d74379

  • SHA256

    dcedbef35842f71e3165be75d4226cf3cf54c66cae5f5bb363d2a55234ec46a7

  • SHA512

    8720d1f4559d0c206f2e58eaf4177c5389b743da2cbdd65f1f7ffdfb17eb0b34c6e1756e2c3b5da5863e01f919da81e467be12b2f7d5e7a2af406e8c9a4173a3

  • SSDEEP

    3072:KRfrisRhKWwJ+KXpkt+9/SjnFNQRf5Bx/xSr:KRjiswtXOOSjnFNQRfx56

Score
10/10

Malware Config

Signatures

  • Remcos family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1728-12-0x0000000000400000-0x000000000041D000-memory.dmp
    .exe windows x86


    Headers

    Sections