__dbk_fcall_wrapper
dbkFCallWrapperAddr
Static task
static1
Behavioral task
behavioral1
Sample
Remcos-v4.9.3-Light/Remcos v4.9.3 Light.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
Remcos-v4.9.3-Light/Remcos v4.9.3 Light.exe
Resource
win10v2004-20240226-en
Target
ef58c8a207adada9c5447782e04554645fcac429718fae53bb208e1d0ad2b9bc
Size
77.7MB
MD5
f31c15d3bcbde1641f168e35076d9ab4
SHA1
45d691163ecc10aa79a6105aaad431c2d827cb5d
SHA256
ef58c8a207adada9c5447782e04554645fcac429718fae53bb208e1d0ad2b9bc
SHA512
0dd694655840296b54bd7376a3c2820744c506088fdd0649a03f8bdb5c36c1b464bb7353b9da839e00e0220dcd05da826756d56ef318110cc8fe6687a9b25ee1
SSDEEP
1572864:MKeHmQA3Mp+SJbltj5KEBYMc1iNTj2oW8u0UVoM7FSqi0x3VXR7B8eqLC:MjGGp+SJb/7B7cFCQSqi0T8fC
Checks for missing Authenticode signature.
resource |
---|
unpack001/Remcos-v4.9.3-Light/Remcos v4.9.3 Light.exe |
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
PlaySoundW
InternetCloseHandle
DocumentPropertiesW
GetSaveFileNameW
ImageList_GetImageInfo
htons
SHGetFileInfoW
MoveWindow
GetFileVersionInfoSizeW
SysFreeString
RegSetValueExW
memcpy
GetVersion
GetVersionExW
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
GetModuleHandleA
LoadLibraryA
GetProcAddress
htons
IsEqualGUID
Pie
__dbk_fcall_wrapper
dbkFCallWrapperAddr
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ