vidar | 4232-346-0x0000000000400000-0x0000000000470000-memory[.]dmp

General

Target
4232-346-0x0000000000400000-0x0000000000470000-memory.dmp
Size 448KB
Sample230221-njtbeaef32
SHA256 60f5f7ed3b78851417341170feb72fdfe094e62061ee37a2e5b43a062850fc87
MD5 9d5259799e922a39dfad3840de9bcb36
SHA1 094b6f313304eb06e8f1c9e29b9447bb976ae10d
SHA512 90d37464c2b7d50800220813ab08b361bf560a47c5f83b428790a774c8eaadd8684d22b8d0817a8d8e9540c7a09a84e095bd2802cc08a9f508e8c7a94dcfef3a
SSDEEP 6144:1zzaqIZItzHsnePQwRi4Y5Werfqtc1D64PQ38zdLS/62U3Pj6+:WZItDawk550c1D64PZVS/6w
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

19 vidar

Family

Version

Botnet

Attributes

SHA256 60f5f7ed3b78851417341170feb72fdfe094e62061ee37a2e5b43a062850fc87
MD5 9d5259799e922a39dfad3840de9bcb36
SHA1 094b6f313304eb06e8f1c9e29b9447bb976ae10d
SHA512 90d37464c2b7d50800220813ab08b361bf560a47c5f83b428790a774c8eaadd8684d22b8d0817a8d8e9540c7a09a84e095bd2802cc08a9f508e8c7a94dcfef3a
SSDEEP 6144:1zzaqIZItzHsnePQwRi4Y5Werfqtc1D64PQ38zdLS/62U3Pj6+:WZItDawk550c1D64PZVS/6w
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

194204

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths