Overview

overview

10

Static

static

10

1168-56-0x...ry.exe

windows7-x64

1168-56-0x...ry.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    1168-56-0x00000000013C0000-0x0000000001E20000-memory.dmp

  • Size

    10.4MB

  • MD5

    62ac52c69c6cac0b4284a1c9d95665cd

  • SHA1

    eabd28acce8ed4f830207eeed512795c096fcffc

  • SHA256

    00f145ddf5c853f487b8dd77449a10ecf6115ce9b4d721aa78037776fbae8feb

  • SHA512

    8affdeb0de3f44fceee221fa939279868f9ce223208c08c8bbd25702e518c99027d59b231d96340aa3efe96b79fd7ff98bd20c1089e6e76ed9d92a3aee681b79

  • SSDEEP

    196608:agIf5JNM54eXxNv10oKwkjmwJs6L3H2cl1Xxwe/e04Fr:c5Q54g/O3l9O6L3H2A1x5e0Y

Score
10/10
themidavidar

Malware Config

Signatures

  • Vidar family
    vidar
  • Themida packer 1 IoCs

    Detects Themida, an advanced Windows software protection system.

    themida
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1168-56-0x00000000013C0000-0x0000000001E20000-memory.dmp
    .exe windows x86


    Headers

    Sections