vidar | 3136-230-0x0000000000400000-0x0000000000471000-memory[.]dmp | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3136-230-0x0000000000400000-0x0000000000471000-memory.dmp
Size

452KB
MD5

995031b0a56994c7e9abadb570673347
SHA1

612809647a8e8d604caf023920dec988bffa7119
SHA256

a887c15de65357713edf70f6ceca6489dcaaf2d9807e634233c69987a379e06f
SHA512

c955df8f9a1df8a04821d7c601c9b6f676f40ec74d99ef629254c6b17b0ad8fbe47c49189c5a5a7bfea654cf0f31de1b10b93ebfd1c3e62558b61f2fdfee11b8
SSDEEP

6144:FoJrOvNTzTM5OGrcpK0sEdmV8aIaq8YNf7H6IQrqmGNHzUa9FwK:2JrOvNHwBcArV05R7H6IQRGNHtwK

Score

10^/10

vidar

Malware Config

Signatures

Vidar family
vidar

Files

3136-230-0x0000000000400000-0x0000000000471000-memory.dmp
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 269KB - Virtual size: 268KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 64KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ