__dbk_fcall_wrapper
dbkFCallWrapperAddr
Static task
static1
Target
Remcos-v5.1.2-Light.zip
Size
38.2MB
MD5
4701a1b25a0d53660eed139a20d81c06
SHA1
f24359d3e1abcf6f51163353f36f628771d00f48
SHA256
36983e119052d1e3e4ebfc91dd66e33d22276600e2bfc5e17ce7f7122c7e482f
SHA512
9a4c228416ff1e54469d6803400b97c559a471f4f3ee0ded679f6bc44e9bc470f104e88d91ba15b1a67ee61cf26ad86d4c31c53a2a271d9cd862cde091119b5a
SSDEEP
786432:7w5O0MIsq510+4kNAS7itToYULsP3zXqh87K:SbMz3k2lmsP3Wh82
Checks for missing Authenticode signature.
resource |
---|
unpack001/Remcos v5.1.2 Light.exe |
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
PlaySoundW
InternetCloseHandle
DocumentPropertiesW
GetSaveFileNameW
ImageList_GetImageInfo
htons
SHGetFileInfoW
MoveWindow
GetFileVersionInfoSizeW
SafeArrayPutElement
WTSUnRegisterSessionNotification
RegSetValueExW
memcpy
GetVersion
GetVersionExW
htons
IsEqualGUID
Pie
__dbk_fcall_wrapper
dbkFCallWrapperAddr
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ