vidar | 2304-310-0x0000000000400000-0x0000000000472000-memory[.]dmp

General

Target
2304-310-0x0000000000400000-0x0000000000472000-memory.dmp
Size 456KB
Sample230216-repzzahh47
SHA256 ccbc52027128f2b225f9fc5db4dde17b3d5aa9c907e5865c9036776052b9ee8c
MD5 acf787c0d0ed976957431c124a09f87b
SHA1 8ccef376dfb0ec748135a3a75a457fbc169ac15d
SHA512 2362b3e5e7bfd81504f883aa0532429060c25aa3f5187c5981f65b05c3fd4fb78e721d44872d9a59d0cbc9d3531128be14ce6f10250cb823ef1165e5e6884ace
SSDEEP 6144:6KpfzMTkFpYnOOeV4mR+OO83puRqHMFatWMYwzbkLsU5dCkJ9:6KpfYTkFNv8H83w0MFatTJYLvj
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

19 vidar

Family

Version

Botnet

Attributes

SHA256 ccbc52027128f2b225f9fc5db4dde17b3d5aa9c907e5865c9036776052b9ee8c
MD5 acf787c0d0ed976957431c124a09f87b
SHA1 8ccef376dfb0ec748135a3a75a457fbc169ac15d
SHA512 2362b3e5e7bfd81504f883aa0532429060c25aa3f5187c5981f65b05c3fd4fb78e721d44872d9a59d0cbc9d3531128be14ce6f10250cb823ef1165e5e6884ace
SSDEEP 6144:6KpfzMTkFpYnOOeV4mR+OO83puRqHMFatWMYwzbkLsU5dCkJ9:6KpfYTkFNv8H83w0MFatTJYLvj
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

207420

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths