vidar | 3956-310-0x0000000000400000-0x0000000000472000-memory[.]dmp

General

Target
3956-310-0x0000000000400000-0x0000000000472000-memory.dmp
Size 456KB
Sample230216-d73vmsff23
SHA256 e9391425cf8319e71e4150b0aae2ebc507be01503c279f3c206174f67b636960
MD5 62a9cf8d68888e23079546126b51931a
SHA1 b3a529cc9eeda4a97816f9b810077bb4b6372e66
SHA512 0bfd5a818a0ab8368f2a473e3e57f97d2d62041475f7fc8f174948cd6a90e04e64e4bca30191aed6284d68305c2414f6f310370ec6c372609d6a311f059ffb87
SSDEEP 6144:6KpfzMTkFpYnOOeV4mR+OO83puRqHMFatWMYwzbkLsU5dCkJM:6KpfYTkFNv8H83w0MFatTJYLv+
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

19 vidar

Family

Version

Botnet

Attributes

SHA256 e9391425cf8319e71e4150b0aae2ebc507be01503c279f3c206174f67b636960
MD5 62a9cf8d68888e23079546126b51931a
SHA1 b3a529cc9eeda4a97816f9b810077bb4b6372e66
SHA512 0bfd5a818a0ab8368f2a473e3e57f97d2d62041475f7fc8f174948cd6a90e04e64e4bca30191aed6284d68305c2414f6f310370ec6c372609d6a311f059ffb87
SSDEEP 6144:6KpfzMTkFpYnOOeV4mR+OO83puRqHMFatWMYwzbkLsU5dCkJM:6KpfYTkFNv8H83w0MFatTJYLv+
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

207420

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths