Static task
static1
Behavioral task
behavioral1
Sample
Trojan.MSIL.Remcos.ASB.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
Trojan.MSIL.Remcos.ASB.exe
Resource
win10v2004-20240802-en
General
-
Target
Trojan.MSIL.Remcos.ASB.MTB-e5efa895d9d1130b2cc48db9e58af737b36dfeb4e908f7a302c0c71f018fde6eN
-
Size
192KB
-
MD5
69f7fbb9bffcad063c8f04c1f9499de0
-
SHA1
0dbc48b20178a4291f5280431945d9795a9147c3
-
SHA256
e5efa895d9d1130b2cc48db9e58af737b36dfeb4e908f7a302c0c71f018fde6e
-
SHA512
f09f95e5e5aa17dfaa49d4b435921a28ab336c312829551491d5082649c9b0d49e1ae23bf27718218ae575020df260927ad21d8057a1c6c3f4e36f1cffb39f50
-
SSDEEP
1536:aM6+vLjoeJut/alWrsFJo1472T3utKq1/r6BoxhztzGnX/xNmsvTDiV5DNztM:BoeJuteNr6GxbGnX3DijDxO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Trojan.MSIL.Remcos.ASB.MTB-e5efa895d9d1130b2cc48db9e58af737b36dfeb4e908f7a302c0c71f018fde6eN
Files
-
Trojan.MSIL.Remcos.ASB.MTB-e5efa895d9d1130b2cc48db9e58af737b36dfeb4e908f7a302c0c71f018fde6eN.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 827KB - Virtual size: 827KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ