remcos | 5048-100-0x0000000004F80000-0x0000000005F80000-memory[.]dmp

General

Target
5048-100-0x0000000004F80000-0x0000000005F80000-memory.dmp
Size 16.0MB
Sample240301-d2vl3sca24
SHA256 7c097e9750caf3b32d7a5986e90cb3525c6b4874cdf35fe81c871d32553cf055
MD5 3834fcb164800a7e1400be351f2111b2
SHA1 9eb75677171e4f57a429c75f55089de1f0c833fb
SHA512 5f11ef1448d3f4f0a2360d90a335fce1e54d95be9ad346664d999ddeadc5692a9dc0951746920f3ab7cd93cbd09739a732f10e70894ccb146088b8eab91ad0e1
SSDEEP 6144:hPXIktXfM8Lv86r9uVWAa2je4Z5zl4hgDHQQs4NTQjoHFsAOZZsAX4cNS5Gv:hPX7tPMK8ctGe4Dzl4h2QnuPs/Zsvcv
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

remcos

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5048-100-0x0000000004F80000-0x0000000005F80000-memory.dmp

SHA256 7c097e9750caf3b32d7a5986e90cb3525c6b4874cdf35fe81c871d32553cf055
MD5 3834fcb164800a7e1400be351f2111b2
SHA1 9eb75677171e4f57a429c75f55089de1f0c833fb
SHA512 5f11ef1448d3f4f0a2360d90a335fce1e54d95be9ad346664d999ddeadc5692a9dc0951746920f3ab7cd93cbd09739a732f10e70894ccb146088b8eab91ad0e1
SSDEEP 6144:hPXIktXfM8Lv86r9uVWAa2je4Z5zl4hgDHQQs4NTQjoHFsAOZZsAX4cNS5Gv:hPX7tPMK8ctGe4Dzl4h2QnuPs/Zsvcv
MD5 SHA1 SHA512 SSDEEP

Minor OS version

0

Major OS version

4

Entry point

5675

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths