Behavioral task
behavioral1
Sample
1676-215-0x0000000000400000-0x000000000146C000-memory.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
1676-215-0x0000000000400000-0x000000000146C000-memory.exe
Resource
win10v2004-20220812-en
General
-
Target
1676-215-0x0000000000400000-0x000000000146C000-memory.dmp
-
Size
16.4MB
-
MD5
dec289bc09b8c3f84c561784b3d008be
-
SHA1
29f3c13e3411189e36b79456b28141a42fb89dd1
-
SHA256
2203a30fddc99bc2a061136458c45f8386f5582523803090c151e7b06b155ec7
-
SHA512
8e59a998a86660ca2c28084ffbeae60121d2881cdeff5b6f90f13850d8d499245a4292b3b8fbc611db36f2352a2b0800c481eb23fb50e91b628abcd47842b5d2
-
SSDEEP
12288:CPy+9p2HD970QYzfemkdBSUjmtiV+h2CtY//7cHHlSu2XvRFjZ4xh9FaoLRm/Jzr:CPZiD9UemkeFau2gY//An4j5Fyu5B+
Malware Config
Extracted
vidar
39.8
706
https://xeronxikxxx.tumblr.com/
-
profile_id
706
Signatures
Files
-
1676-215-0x0000000000400000-0x000000000146C000-memory.dmp.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 517KB - Virtual size: 517KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 94KB - Virtual size: 94KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 11KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE