vidar | 3400-134-0x0000000001100000-0x0000000001171000-memory[.]dmp | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3400-134-0x0000000001100000-0x0000000001171000-memory.dmp
Size

452KB
MD5

4addb28065f38fe21c87a4f8d6430bc7
SHA1

1a17a1c97bf62ddcd986f5737c337d3ace5491ac
SHA256

d9661d226efb693c5141e09ae3c3e1ab204c09d4527b80c5ff96496fe323aa8d
SHA512

29a61d98149fda95e6d6e3061dca4af0c9d4ebab7735e23a133520d74bb2818e1736c2bd8f3785a81b2a3b2981bba3dc6cbeeff8b305b0d0de0601fed92b05af
SSDEEP

6144:2pw8kWACDU/ST38wZlUci6JsjBz+Sf2NktIUzUAn8fsFW:yw8klCOSPlN0Fz+SfW277n80FW

Score

10^/10

vidar

Malware Config

Signatures

Vidar family
vidar

Files

3400-134-0x0000000001100000-0x0000000001171000-memory.dmp
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 269KB - Virtual size: 269KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 64KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ