vidar | 1584-322-0x0000000000400000-0x0000000000472000-memory[.]dmp

General

Target
1584-322-0x0000000000400000-0x0000000000472000-memory.dmp
Size 456KB
Sample230216-kmwddsgg46
SHA256 c42f819143ca2cc0a47123be37138f76fdb7cc6cef403308f19038475790b001
MD5 4e6f758f681c45b0d7ace029b0e24f77
SHA1 ae827b1b4efb1a1dab8d374bd0b58a840d97f39d
SHA512 198b5cef05e52eea1edcb6ed927eddcb1ebbaa680c2e0a7b27594faebc223005b1df2231aab7c66445a558acb6111fe04569aba980c4d7b5ed93767b61ada257
SSDEEP 6144:6KpfzMTkFpYnOOeV4mR+OO83puRqHMFatWMYwzbkLsU5dCkJ3:6KpfYTkFNv8H83w0MFatTJYLvp
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

19 vidar

Family

Version

Botnet

Attributes

SHA256 c42f819143ca2cc0a47123be37138f76fdb7cc6cef403308f19038475790b001
MD5 4e6f758f681c45b0d7ace029b0e24f77
SHA1 ae827b1b4efb1a1dab8d374bd0b58a840d97f39d
SHA512 198b5cef05e52eea1edcb6ed927eddcb1ebbaa680c2e0a7b27594faebc223005b1df2231aab7c66445a558acb6111fe04569aba980c4d7b5ed93767b61ada257
SSDEEP 6144:6KpfzMTkFpYnOOeV4mR+OO83puRqHMFatWMYwzbkLsU5dCkJ3:6KpfYTkFNv8H83w0MFatTJYLvp
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

207420

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths