remcos | 4880-99-0x0000000004860000-0x0000000005860000-memory[.]dmp

General

Target
4880-99-0x0000000004860000-0x0000000005860000-memory.dmp
Size 16.0MB
Sample240301-dv79labg79
SHA256 6b46090a5fbea2d1c5bddd027663f6874a934c3ad15545bd60379bd4b47860a1
MD5 2a8ba24711cfb0f919fb748c47f37ab5
SHA1 93a988cac5b865ef9c36537b5e343016a5010d24
SHA512 164cea3da020358966f7f8b0d42f2ae2476eb4a3a6cf4ffe2362f52ad356681c53bda35acd8c1da8d141b94b204dbd06160c83b59f1b0fc31d01b0e6cb809d52
SSDEEP 6144:l/7iPrcL3ArwhBq7Kjsn9iHGXg0lwGS9MNNhdFvPxps9gsAOZZuAXec7A7ov:l/uPq3AfK496Gw0lwGXN3pvs/ZuN8v
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

remcos

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4880-99-0x0000000004860000-0x0000000005860000-memory.dmp

SHA256 6b46090a5fbea2d1c5bddd027663f6874a934c3ad15545bd60379bd4b47860a1
MD5 2a8ba24711cfb0f919fb748c47f37ab5
SHA1 93a988cac5b865ef9c36537b5e343016a5010d24
SHA512 164cea3da020358966f7f8b0d42f2ae2476eb4a3a6cf4ffe2362f52ad356681c53bda35acd8c1da8d141b94b204dbd06160c83b59f1b0fc31d01b0e6cb809d52
SSDEEP 6144:l/7iPrcL3ArwhBq7Kjsn9iHGXg0lwGS9MNNhdFvPxps9gsAOZZuAXec7A7ov:l/uPq3AfK496Gw0lwGXN3pvs/ZuN8v
MD5 SHA1 SHA512 SSDEEP

Minor OS version

0

Major OS version

4

Entry point

5646

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths