vidar | 4184-246-0x0000000000400000-0x0000000000470000-memory[.]dmp

General

Target
4184-246-0x0000000000400000-0x0000000000470000-memory.dmp
Size 448KB
Sample230221-k4weqaec33
SHA256 a9cd3c6ca39b61702d385a8fbce864bcc8dd27aa4699e24303d2b4ddd13354ef
MD5 0fa970fdb940a20bd41c4ba378316580
SHA1 f0784c245429bb8667cda638bce2c64f23b4644b
SHA512 a3f6928b164abf83be87e901062dbb1778729d4b162bbeb8b43ca19f9cd1669ce1b6df44b01bc363a14dbfea1bb380f4dda2157002c81f37fb91f195bffe6326
SSDEEP 6144:1zzaqIZItzHsnePQwRi4Y5Werfqtc1D64PQ38zdLS/62U3Ij6+:WZItDawk550c1D64PZVS/6B
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

19 vidar

Family

Version

Botnet

Attributes

SHA256 a9cd3c6ca39b61702d385a8fbce864bcc8dd27aa4699e24303d2b4ddd13354ef
MD5 0fa970fdb940a20bd41c4ba378316580
SHA1 f0784c245429bb8667cda638bce2c64f23b4644b
SHA512 a3f6928b164abf83be87e901062dbb1778729d4b162bbeb8b43ca19f9cd1669ce1b6df44b01bc363a14dbfea1bb380f4dda2157002c81f37fb91f195bffe6326
SSDEEP 6144:1zzaqIZItzHsnePQwRi4Y5Werfqtc1D64PQ38zdLS/62U3Ij6+:WZItDawk550c1D64PZVS/6B
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

194204

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths