vidar | 336-818-0x0000000000090000-0x0000000000101000-memory[.]dmp | Triage

Sharing

Copy URL Twitter E-mail

General

Target

336-818-0x0000000000090000-0x0000000000101000-memory.dmp
Size

452KB
MD5

08afeb6c8f87f3eb44951fd3ede1d8de
SHA1

21e304eeb5b224f426d69b64d499e4638af5dd19
SHA256

591d79e95c4983d4e357e2821877988dc5951990d57df581c3bda8052b02dc15
SHA512

25c08a3a45cb2e0822ea62ad79cedfcac790cb3ccacb307ac19890aac9fef9bab724a3a582636007d979f0e61069af7c2c905f878000cf76b2b5f744610070a2
SSDEEP

6144:6+8Ywvs8XpwGuq8EB4KfM+C8eVfar3YRG4GJxYXDZmGNH8UunK:mYwvs8ZHwSp+VSx4GJxYXcGNHCK

Score

10^/10

vidar

Malware Config

Signatures

Vidar family
vidar

Files

336-818-0x0000000000090000-0x0000000000101000-memory.dmp
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 269KB - Virtual size: 268KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 64KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ