Overview

overview

10

Static

static

10

1048-55-0x...ry.exe

windows7-x64

1048-55-0x...ry.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    1048-55-0x0000000001210000-0x0000000001B73000-memory.dmp

  • Size

    9.4MB

  • MD5

    28765bf07212cdf21115be914209bb12

  • SHA1

    821edb49d30015647657cdac018058dc55190507

  • SHA256

    9ec3c5ce433450e99dbf53ca5ce78d4aa3e792b603c0a9ee5d76e30c97efa1df

  • SHA512

    321e6b586baf399d6619549d1c2693ae7d52f41f31627afa3c283e851c3d431f7c358a117b231356236d04678705d5535d4fbbdf9d4665171cbc47e41b3404db

  • SSDEEP

    196608:CLl4WkZe/xRn9SUhKx+HvqS3lRBKVrWQu98aU7E8+:cGWkZIxj/hmsxec98aU7E8+

Score
10/10
vmprotectthemidavidar

Malware Config

Signatures

  • Vidar family
    vidar
  • VMProtect packed file 1 IoCs

    Detects executables packed with VMProtect commercial packer.

    vmprotect
  • Themida packer 1 IoCs

    Detects Themida, an advanced Windows software protection system.

    themida

Files

  • 1048-55-0x0000000001210000-0x0000000001B73000-memory.dmp
    .exe windows x86


    Headers

    Sections