vidar | 4744-236-0x0000000000400000-0x0000000000472000-memory[.]dmp

General

Target
4744-236-0x0000000000400000-0x0000000000472000-memory.dmp
Size 456KB
Sample230217-l532maed41
SHA256 6cac5c9862a7b177c0f0c54539c29b48d5bd02ae50fd21b9f998722da5d77b39
MD5 cdb6fdc5211f8b06670dbb9ee035ab51
SHA1 100f746caee28974f1eacaa86d578c7d8591ba2a
SHA512 3c6884b2ac4624fb2001ab05d4fa69d2e6a66f90c32c92c31dbcbf4f2a3ba1fbf7a69ee876deb319f650c7d310f5c909c052908564fdbb5ff0d8f7b492aefe91
SSDEEP 6144:6KpfzMTkFpYnOOeV4mR+OO83puRqHMFatWMYwzbkLsU5dCkJf:6KpfYTkFNv8H83w0MFatTJYLvt
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

19 vidar

Family

Version

Botnet

Attributes

SHA256 6cac5c9862a7b177c0f0c54539c29b48d5bd02ae50fd21b9f998722da5d77b39
MD5 cdb6fdc5211f8b06670dbb9ee035ab51
SHA1 100f746caee28974f1eacaa86d578c7d8591ba2a
SHA512 3c6884b2ac4624fb2001ab05d4fa69d2e6a66f90c32c92c31dbcbf4f2a3ba1fbf7a69ee876deb319f650c7d310f5c909c052908564fdbb5ff0d8f7b492aefe91
SSDEEP 6144:6KpfzMTkFpYnOOeV4mR+OO83puRqHMFatWMYwzbkLsU5dCkJf:6KpfYTkFNv8H83w0MFatTJYLvt
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

207420

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths