Overview

overview

10

Static

static

10

1348-55-0x...ry.exe

windows7-x64

1348-55-0x...ry.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    1348-55-0x00000000009C0000-0x000000000132B000-memory.dmp

  • Size

    9.4MB

  • MD5

    cb7c6047626d18a39cda928d66c035aa

  • SHA1

    cbfeace1fb7fabd51d214d79ba89ea2f41b693dc

  • SHA256

    de6829446337146d607d6067c560dacbb1196babbe62ddaa4ba7f4e32bfde87c

  • SHA512

    310bc12f7395a48d0f13c82cdff43b2a9b5023ebe6c2b6cd75ae523606249fd82285be3fc1a5294be505e94296a318f28fc4a294ae9183e5f81cb6a56284868f

  • SSDEEP

    98304:P+ccVK7TewlJtDFzjvUn9WU/f2G88KKrWzRoNijDPnthMTxoqlxFxklHRxOWI1YE:7cCFcYKCzOijD/4TDTrix5

Score
10/10
vmprotectthemidavidar

Malware Config

Signatures

  • Vidar family
    vidar
  • VMProtect packed file 1 IoCs

    Detects executables packed with VMProtect commercial packer.

    vmprotect
  • Themida packer 1 IoCs

    Detects Themida, an advanced Windows software protection system.

    themida

Files

  • 1348-55-0x00000000009C0000-0x000000000132B000-memory.dmp
    .exe windows x86


    Headers

    Sections