vidar | 1624-303-0x0000000000400000-0x0000000000472000-memory[.]dmp

General

Target
1624-303-0x0000000000400000-0x0000000000472000-memory.dmp
Size 456KB
Sample230216-b37a6afb75
SHA256 ab89c7d1aef603d83a2f587a872b4f7c8e3b3ec962a0d90b7afb1e33f79a7d43
MD5 0f3fe36676611c86a3472a91e9e44a3f
SHA1 6eb2fdf1a27fd5209eec68a20ec821658b7c70fb
SHA512 9cab7e06eb34b4fe7e22c8832590dfa84a278dbece9a21ead2cc6e46de4b770498aa9d6113d49cd6f2b925819348e84d90eae87d2fcc7dfca0da93fc31498fb0
SSDEEP 6144:6KpfzMTkFpYnOOeV4mR+OO83puRqHMFatWsYwzbkLsU5dCkJI:6KpfYTkFNv8H83w0MFatXJYLv6
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

19 vidar

Family

Version

Botnet

Attributes

SHA256 ab89c7d1aef603d83a2f587a872b4f7c8e3b3ec962a0d90b7afb1e33f79a7d43
MD5 0f3fe36676611c86a3472a91e9e44a3f
SHA1 6eb2fdf1a27fd5209eec68a20ec821658b7c70fb
SHA512 9cab7e06eb34b4fe7e22c8832590dfa84a278dbece9a21ead2cc6e46de4b770498aa9d6113d49cd6f2b925819348e84d90eae87d2fcc7dfca0da93fc31498fb0
SSDEEP 6144:6KpfzMTkFpYnOOeV4mR+OO83puRqHMFatWsYwzbkLsU5dCkJI:6KpfYTkFNv8H83w0MFatXJYLv6
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

207420

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths