Behavioral task
behavioral1
Sample
776-138-0x0000000000800000-0x0000000000872000-memory.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
776-138-0x0000000000800000-0x0000000000872000-memory.exe
Resource
win10v2004-20220812-en
General
-
Target
776-138-0x0000000000800000-0x0000000000872000-memory.dmp
-
Size
456KB
-
MD5
3a3298d87e412c176a28e56ee918cfe6
-
SHA1
5170d91e5b7ab4281386a7dcea3db949db417e63
-
SHA256
2c0fa10fdc3c4b962faeb59246d6574ef06d3761afef85f295204060e35362d0
-
SHA512
8a589525a8ae5db7d8e0ecefadd90cac013f5ce0c33ea9e702eba72334024f499c2444aa4963054458e80297c6bcd149f02ebb099c54a01c917cbb49723ab3f5
-
SSDEEP
6144:CHd2snAZDkCZbuuq3D3Fr6PMXDuOYijvafhtfhDV9KUBi1M2am:CHd2snsDkCFqDFeMXKujvafhBhDV9ve
Malware Config
Signatures
-
Vidar family
Files
-
776-138-0x0000000000800000-0x0000000000872000-memory.dmp.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 273KB - Virtual size: 273KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 64KB - Virtual size: 63KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 23KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ