Behavioral task
behavioral1
Sample
d11bbf9f60a2333e48e20fcb36c9f0a429bd535534d259ca5dd831d0c7dd6f94N.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d11bbf9f60a2333e48e20fcb36c9f0a429bd535534d259ca5dd831d0c7dd6f94N.dll
Resource
win10v2004-20241007-en
General
-
Target
d11bbf9f60a2333e48e20fcb36c9f0a429bd535534d259ca5dd831d0c7dd6f94N.exe
-
Size
2.5MB
-
MD5
a7bf00a025efb7235ee68a65867be2f0
-
SHA1
b31b92e03653ec112ccce1d2ad5b1f35254fb76a
-
SHA256
d11bbf9f60a2333e48e20fcb36c9f0a429bd535534d259ca5dd831d0c7dd6f94
-
SHA512
f95f2f961811fb436253ef134db235b5b11f8ff9b2ce24f1dc8c2e08db113021d7fe465a1dd1d3afef08696e62eff0120f622e362a9bd43245d7f006c81cde26
-
SSDEEP
49152:a2Fb2FWSeIpVXISeIpVX3ISeIpVX3bR8IYqZR9CR8IMqZ:a8xS9NIS9N3IS9N3bRPwRP
Malware Config
Signatures
-
Remcos family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d11bbf9f60a2333e48e20fcb36c9f0a429bd535534d259ca5dd831d0c7dd6f94N.exe
Files
-
d11bbf9f60a2333e48e20fcb36c9f0a429bd535534d259ca5dd831d0c7dd6f94N.exe.dll windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
Sections
.text Size: 311KB - Virtual size: 311KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ