Behavioral task
behavioral1
Sample
2212-359-0x0000000000400000-0x00000000004A1000-memory.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
2212-359-0x0000000000400000-0x00000000004A1000-memory.exe
Resource
win10v2004-20220812-en
General
-
Target
2212-359-0x0000000000400000-0x00000000004A1000-memory.dmp
-
Size
644KB
-
MD5
cce1742f103a42e7537989581dd5c939
-
SHA1
ed2d579f5366074eb975ce6661a95e0962d449de
-
SHA256
f3769721d49e8ad7fc569f021b7a4b066cc7f1c2cf44c8faa200998968abfb37
-
SHA512
93189a1879d7f8a40d22b5f5bcfeaf1ad7ef5446c870aa75e38a935ce7e8eff217d5c89f8dcf1f124b587bfabbb43dc263f72386ad13efe8d5fa54a21505c780
-
SSDEEP
12288:iPy+9p2HD970QYzfemkdBSUjmtiV+h2CtY//7cHHlSu2XvRFj948h9FaoLRm/JzY:iPZiD9UemkeFau2gY//An4j5FGF5B
Malware Config
Extracted
vidar
39.8
921
https://xeronxikxxx.tumblr.com/
-
profile_id
921
Files
-
2212-359-0x0000000000400000-0x00000000004A1000-memory.dmp.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 517KB - Virtual size: 517KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 94KB - Virtual size: 94KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 11KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE