vidar | 2144540x00000000100000000[.]dmp | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2144540x00000000100000000.dmp
Size

428KB
MD5

14936ff2baa67c9b6419f9b809aaac2f
SHA1

4e65300e78beb4bbbaef0aa9a0cc0b10f4e2d1b2
SHA256

5203936f7a4392f6ae73f7cfb759d4d6254e55dd721780c9a3f9db62826290c9
SHA512

4c940dcd3d556bf32a65756fca146c47b7a28996004f62614bed5b660c4737f3cc309ea562d48b2bc2f846f0c9016ccc631b5e789bff7a387bcf3b05b621f5a5
SSDEEP

6144:Jo/d1m+/71Sr2Wn54DbY7ENJUI0ZePjfDkBVRXFMthWMVIO:q/dlu4DbyEwLZePjfDCRXFMCMV5

Score

10^/10

vidar

Malware Config

Signatures

Vidar family
vidar

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2144540x00000000100000000.dmp

Files

2144540x00000000100000000.dmp
.dll windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 248KB - Virtual size: 256.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 61KB - Virtual size: 256.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 256.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 22KB - Virtual size: 256.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ