remcos | 5000-96-0x00000000044E0000-0x00000000054E0000-memory[.]dmp

General

Target
5000-96-0x00000000044E0000-0x00000000054E0000-memory.dmp
Size 16.0MB
Sample240301-lsp91afd23
SHA256 57d0e9c011b73f6c6f71eec8ae64459099ebd1a175219e9932c37e9a135b6875
MD5 85252bc906c2d7b7c3af59c0c65fd6d1
SHA1 5043413b4692e3a9eb69d7848d41196d350dcd7d
SHA512 d8bae15096a40d44b999744bb431b588407a41edecdbd68c1c0542b87ed251e39e05ccd0613fb519cd3c5183f83fa54a14f28c78c3c77be1f522cf2515fc174e
SSDEEP 6144:joXIktXfM8Lv86r9uVWAa2je4Z5zl4hgDHQQs4NTQjoHFsAOZZsAX4cNd5Gv:EX7tPMK8ctGe4Dzl4h2QnuPs/Zsscv
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

remcos

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5000-96-0x00000000044E0000-0x00000000054E0000-memory.dmp

SHA256 57d0e9c011b73f6c6f71eec8ae64459099ebd1a175219e9932c37e9a135b6875
MD5 85252bc906c2d7b7c3af59c0c65fd6d1
SHA1 5043413b4692e3a9eb69d7848d41196d350dcd7d
SHA512 d8bae15096a40d44b999744bb431b588407a41edecdbd68c1c0542b87ed251e39e05ccd0613fb519cd3c5183f83fa54a14f28c78c3c77be1f522cf2515fc174e
SSDEEP 6144:joXIktXfM8Lv86r9uVWAa2je4Z5zl4hgDHQQs4NTQjoHFsAOZZsAX4cNd5Gv:EX7tPMK8ctGe4Dzl4h2QnuPs/Zsscv
MD5 SHA1 SHA512 SSDEEP

Minor OS version

0

Major OS version

4

Entry point

5640

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths