remcos | 4976-100-0x00000000052D0000-0x00000000062D0000-memory[.]dmp

General

Target
4976-100-0x00000000052D0000-0x00000000062D0000-memory.dmp
Size 16.0MB
Sample240301-d9sgpacb53
SHA256 73b38b1531c231ce25ca46af10e00d9a6b84334841e527eead600358a3f609bb
MD5 c003f01a1fb116b9471f99f039f3f3cf
SHA1 eec6dcc7d2502d766c552b69126b930e94c6c2b9
SHA512 0e7f5264e1decccd8bc3c5da4d4211a7a66eedfcd0cdb468cb549995ee527dce5842afb2b297f01e4f8e09a3279e391c6e9fae68f1215693e89424eb029ec725
SSDEEP 6144:DXIktXfM8Lv86r9uVWAa2je4Z5zl4hgDHQQs4NTQjoHFsAOZZsAX4cNO5Gv:DX7tPMK8ctGe4Dzl4h2QnuPs/ZsTcv
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

remcos

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4976-100-0x00000000052D0000-0x00000000062D0000-memory.dmp

SHA256 73b38b1531c231ce25ca46af10e00d9a6b84334841e527eead600358a3f609bb
MD5 c003f01a1fb116b9471f99f039f3f3cf
SHA1 eec6dcc7d2502d766c552b69126b930e94c6c2b9
SHA512 0e7f5264e1decccd8bc3c5da4d4211a7a66eedfcd0cdb468cb549995ee527dce5842afb2b297f01e4f8e09a3279e391c6e9fae68f1215693e89424eb029ec725
SSDEEP 6144:DXIktXfM8Lv86r9uVWAa2je4Z5zl4hgDHQQs4NTQjoHFsAOZZsAX4cNO5Gv:DX7tPMK8ctGe4Dzl4h2QnuPs/ZsTcv
MD5 SHA1 SHA512 SSDEEP

Minor OS version

0

Major OS version

4

Entry point

5748

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths