vidar | 1384-133-0x0000000000400000-0x0000000000471000-memory[.]dmp | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1384-133-0x0000000000400000-0x0000000000471000-memory.dmp
Size

452KB
MD5

a00f927cd69bb0c2d95df8b7b3340d52
SHA1

e073a84dfb79d95e0b92894a749b9be31de4fa76
SHA256

2704f36eb4eee21e7c1b46e3927d4e58fff682a362382b19604fafc9e7722a26
SHA512

8878f769347ee4223d4395b525bc3336889c9da87a7d42d85c4c97c9035687b595aae9ad222994abbfaf25509a6d2f5a6b5d450fdff7e9e427cf097b83ace03d
SSDEEP

6144:FoJrOvNTzTM5OGrcpK0sEdmV8aIaq8YNf7H6IQrwmGNHzUa9UwK:2JrOvNHwBcArV05R7H6IQHGNH8wK

Score

10^/10

vidar

Malware Config

Signatures

Vidar family
vidar

Files

1384-133-0x0000000000400000-0x0000000000471000-memory.dmp
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 269KB - Virtual size: 268KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 64KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ