Static task
static1
Behavioral task
behavioral1
Sample
SecuriteInfo.com.MSIL.Remcos.GWMJE.tr.2177.15379.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
SecuriteInfo.com.MSIL.Remcos.GWMJE.tr.2177.15379.exe
Resource
win10v2004-20240226-en
General
-
Target
SecuriteInfo.com.MSIL.Remcos.GWMJE.tr.2177.15379.exe
-
Size
740KB
-
MD5
6916dc612de7bc466588dacfb83559de
-
SHA1
672a4efddde6a95881771614d6a4c6587a591fb5
-
SHA256
6956408ecee746f2fa4008b564cb84a610112a9176e531b1a97ffc8923106364
-
SHA512
248562208574766dde50e8e00ca28ff2847fe1c44c8e9aeb1a25192a9be7f24150fb6a04bec5715ed8e8bb338087da88f395acd096e438d1f95ebea5d894d6d4
-
SSDEEP
12288:WfwsJTENl3lJp3mRVn3EmQye8dv/LCo7/lNuDGceNQIK4ofGL/a1ANGkYq:QRxENlZ3IV3Epp8dXd/jzc8QIK3G27/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource SecuriteInfo.com.MSIL.Remcos.GWMJE.tr.2177.15379.exe
Files
-
SecuriteInfo.com.MSIL.Remcos.GWMJE.tr.2177.15379.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 724KB - Virtual size: 723KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ